CVE-2022-27782 in PeopleSoft Enterprise PeopleTools

Resumen (Inglés)

libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Divulgación

2022-06-02

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
218809	Oracle PeopleSoft Enterprise PeopleTools File Processing		No está definido	Arreglo oficial	CVE-2022-27782
218725	Oracle HTTP Server SSL Module autenticación débil	295	No está definido	Arreglo oficial	CVE-2022-27782
211439	Oracle Communications Cloud Native Core Network Function Cloud Native Environment Configuration autenticación débil	295	No está definido	Arreglo oficial	CVE-2022-27782
201183	libcurl Connection Pool escalada de privilegios	841	No está definido	No está definido	CVE-2022-27782

Fuentes

• MITRE
• NVD
• CVE Details