ZeroDay Findings
Sign inSign up

Findings

CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making…

Published May 26, 2022 · updated Oct 14, 2026 · haxx curl

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).

Timeline

Detection, updates, and resolution for this record.

  1. May 26, 2022 · NIST NVD

    Detected

    An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).

  2. Oct 14, 2026 · NIST NVD

    Updated

    An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).

Affected

  • cpe broadcom/fabric operating systemversion unspecified
  • cpe debian/debian linux10.0
  • cpe debian/debian linux11.0
  • cpe haxx/curlversion unspecified
  • cpe netapp/bootstrap osversion unspecified
  • cpe netapp/clustered data ontapversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h410s firmwareversion unspecified
  • cpe netapp/h500s firmwareversion unspecified
  • cpe netapp/h700s firmwareversion unspecified
  • cpe netapp/solidfire & hci management nodeversion unspecified
  • cpe netapp/solidfire & hci storage nodeversion unspecified

Sources

  • CVE.orgCVE-2022-22576

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2022-22576

    An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL

    nvd.nist.gov

References