CVE-2022-27776
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but ano…
Published Jun 2, 2022 · updated Oct 14, 2026 · haxx curl
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
Timeline
Detection, updates, and resolution for this record.
Jun 2, 2022 · NIST NVD
Detected
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
Oct 14, 2026 · NIST NVD
Updated
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
Affected
- cpe debian/debian linux10.0
- cpe debian/debian linux11.0
- cpe fedoraproject/fedora36
- cpe fedoraproject/fedora37
- cpe haxx/curlversion unspecified
- cpe netapp/clustered data ontapversion unspecified
- cpe netapp/h300s firmwareversion unspecified
- cpe netapp/h410s firmwareversion unspecified
- cpe netapp/h500s firmwareversion unspecified
- cpe netapp/h700s firmwareversion unspecified
- cpe netapp/hci bootstrap osversion unspecified
- cpe netapp/solidfire & hci management nodeversion unspecified
Sources
- CVE.orgCVE-2022-27776
Official CVE identifier
cve.org - NIST NVDCVE-2022-27776
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
nvd.nist.gov