CVE-2022-22576

ADVISORY - nist

Summary

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).

EPSS Score⁠: 0.00241 (0.471)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-287⁠

Improper Authentication

CWE-306⁠

Missing Authentication for Critical Function

ADVISORY - redhat

CWE-287⁠

Improper Authentication

CWE-295⁠

Improper Certificate Validation

Impacted images

Advisories

NIST

CREATED

4 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2022-22576⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-287⁠CWE-306⁠

CVSS SCORE

8.1high

Alpine

CREATED

4 years ago

UPDATED

1 day ago

ADVISORY IDCVE-2022-22576⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

4 years ago

UPDATED

1 month ago

ADVISORY IDCVE-2022-22576⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

4 years ago

UPDATED

11 months ago

ADVISORY IDCVE-2022-22576⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

8.1medium

Alma

CREATED

4 years ago

UPDATED

4 years ago

ADVISORY IDALSA-2022:5313⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

3 years ago

UPDATED

3 years ago

ADVISORY IDALAS-2022-1646⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

4 years ago

UPDATED

4 years ago

ADVISORY IDALAS2-2022-1792⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

2 years ago

UPDATED

11 months ago

ADVISORY IDALAS2022-2022-055⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

2 years ago

UPDATED

11 months ago

ADVISORY IDALAS2022-2022-065⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

2 years ago

UPDATED

11 months ago

ADVISORY IDALAS2022-2022-206⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

3 years ago

UPDATED

2 years ago

ADVISORY IDALAS2023-2023-083⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Red Hat

CREATED

4 years ago

UPDATED

1 month ago

ADVISORY IDCVE-2022-22576⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-287⁠CWE-295⁠

CVSS SCORE

8.1medium

Rocky

CREATED

4 years ago

UPDATED

11 months ago

ADVISORY IDRLSA-2022:5313⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Oracle

CREATED

4 years ago

UPDATED

4 years ago

ADVISORY IDELSA-2022-5245⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Oracle

CREATED

4 years ago

UPDATED

4 years ago

ADVISORY IDELSA-2022-5313⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Photon

CREATED

1 year ago

UPDATED

5 months ago

ADVISORY ID

CVE-2022-22576

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

8.1high

intheWild

CREATED

11 months ago

UPDATED

11 months ago

ADVISORY IDCVE-2022-22576⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY