CVE-2022-22576 in cURL
Сводка (Английский)
An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Резервировать
04.01.2022
Раскрытие
26.05.2022
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 200815 | cURL OAUTH2 Authentication слабая аутентификация | 287 | Не определено | Не определено | CVE-2022-22576 |