Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing dot while not using one when it built the HSTS cache. Or the otherway around - by having the trailing dot in the HSTS cache and *not* using thetrailing dot in the URL.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 15 products
⚡ HSTS multi-trailing-dot bypass-ish: possible incomplete fix for CVE-2022-30115 👨🏻💻 giant_anteater ➟ curl 🟧 Medium 💰 None 🔗 https://hackerone.com/reports/3733984 #bugbounty #bugbountytips #cybersecurity #infosec https://t.co/um3rpJtrF0
Post summary
The tweet alerts to a possible incomplete fix for CVE-2022-30115 involving an HSTS multi-trailing-dot bypass, with PoC details referenced via a HackerOne report.
16 of 16 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | haxx | curl | - | - | - |
| App | netapp | clustered_data_ontap | - | - | - |
| HW | netapp | h300s | - | - | - |
| OS | netapp | h300s_firmware | - | - | - |
| HW | netapp | h410s | - | - | - |
| OS | netapp | h410s_firmware | - | - | - |
| HW | netapp | h500s | - | - | - |
| OS | netapp | h500s_firmware | - | - | - |
| HW | netapp | h700s | - | - | - |
| OS | netapp | h700s_firmware | - | - | - |
| OS | netapp | hci_bootstrap_os | - | - | - |
| HW | netapp | hci_compute_node | - | - | - |
| App | netapp | solidfire\,_enterprise_sds_\&_hci_storage_node | - | - | - |
| App | netapp | solidfire_\&_hci_management_node | - | - | - |
| App | splunk | universal_forwarder | - | - | - |
| App | splunk | universal_forwarder | 9.1.0 | - | - |