CVE-2022-22576 in cURL
Zusammenfassung (Englisch)
An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservieren
04.01.2022
Veröffentlichung
26.05.2022
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 200815 | cURL OAUTH2 Authentication schwache Authentisierung | 287 | Nicht definiert | Nicht definiert | CVE-2022-22576 |