Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 17 products
🚨 HIGH severity CVE-2022-22576 (CVSS 8.1) affects curl 7.33.0-7.82.0. Improper auth flaw may allow OAUTH2 connection reuse without credential verification. Impacts SMTP(S), IMAP(S), POP3(S), LDAP(S). Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/jTM9BbfEhb
Post summary
The tweet announces a high‑severity authentication flaw in curl and urges users to apply the immediate patch.
19 of 19 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | brocade | fabric_operating_system | - | - | - |
| OS | debian | debian_linux | 10.0 | - | - |
| OS | debian | debian_linux | 11.0 | - | - |
| App | haxx | curl | - | - | - |
| OS | netapp | bootstrap_os | - | - | - |
| App | netapp | clustered_data_ontap | - | - | - |
| HW | netapp | h300s | - | - | - |
| OS | netapp | h300s_firmware | - | - | - |
| HW | netapp | h410s | - | - | - |
| OS | netapp | h410s_firmware | - | - | - |
| HW | netapp | h500s | - | - | - |
| OS | netapp | h500s_firmware | - | - | - |
| HW | netapp | h700s | - | - | - |
| OS | netapp | h700s_firmware | - | - | - |
| HW | netapp | hci_compute_node | - | - | - |
| App | netapp | solidfire_\&_hci_management_node | - | - | - |
| App | netapp | solidfire_\&_hci_storage_node | - | - | - |
| App | splunk | universal_forwarder | - | - | - |
| App | splunk | universal_forwarder | 9.1.0 | - | - |