Authentication Bypass

🗓️ 29 Apr 2022 06:57:54Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 45 Views

Curl authentication bypass vulnerability Remote attacker impersonation risk

Reporter	Title	Published	Views	Family All 182
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	23 Sep 202222:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libcurl may affect IBM Spectrum Copy Data Management (CVE-2022-27782, CVE-2022-27774, CVE-2021-22947, CVE-2022-22576, CVE-2022-27776, CVE-2021-22946)	17 Sep 202202:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libcurl may affect IBM Spectrum Protect Plus (CVE-2021-22946, CVE-2022-27782, CVE-2022-27774, CVE-2022-22576, CVE-2021-22947, CVE-2022-27776)	17 Sep 202212:04	–	ibm
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to heap-based buffer overflow and remote attacker to bypass security restrictions	20 Feb 202503:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in cURL libcurl (CVE-2022-22576).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar WinCollect is vulnerable to using components with known vulnerabilities	17 Jun 202218:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Golang Go, libxml2, curl, expat, libgcrypt and IBM WebSphere Application Server Liberty	9 Aug 202205:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202502:21	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.	15 Dec 202209:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	15 Apr 202502:31	–	ibm

Vulners

Node

curl curlMatch7.77.0-r0os

AND

curl curlMatch7.77.0-r1os

AND

curl curlMatch7.78.0-r0os

AND

curl curlMatch7.79.0-r0os

AND

curl curlMatch7.79.1-r0os

AND

alpinelinux alpine_linuxMatch3.14

curl curlMatch7.80.0-r0os

AND

curl curlMatch7.79.1-r0os

AND

alpinelinux alpine_linuxMatch3.15

curl curlMatch7.77.0-r0os

AND

curl curlMatch7.79.1-r0os

AND

curl curlMatch7.74.0-r1os

AND

curl curlMatch7.79.0-r0os

AND

curl curlMatch7.77.0-r1os

AND

curl curlMatch7.76.1-r0os

AND

curl curlMatch7.78.0-r0os

AND

alpinelinux alpine_linuxMatch3.13

curl curlMatch7.76.1-r0os

AND

curl curlMatch7.69.1-r3os

AND

curl curlMatch7.79.0-r0os

AND

curl curlMatch7.78.0-r0os

AND

curl curlMatch7.69.1-r0os

AND

curl curlMatch7.77.0-r0os

AND

curl curlMatch7.79.1-r0os

AND

alpinelinux alpine_linuxMatch3.12

curl curlMatch7.76.0-r0os

AND

curl curlMatch7.69.0-r0os

AND

curl curlMatch7.82.0-r0os

AND

curl curlMatch7.68.0-r0os

AND

curl curlMatch7.78.0-r2os

AND

curl curlMatch7.81.0-r1os

AND

curl curlMatch7.77.0-r0os

AND

curl curlMatch7.80.0-r0os

AND

curl curlMatch7.75.0-r0os

AND

curl curlMatch7.79.1-r0os

AND

curl curlMatch7.69.0-r1os

AND

curl curlMatch7.78.0-r0os

AND

curl curlMatch7.77.0-r1os

AND

curl curlMatch7.76.1-r0os

AND

curl curlMatch7.79.0-r0os

AND

curl curlMatch7.69.1-r0os

AND

curl curlMatch7.81.0-r0os

AND

alpinelinux alpine_linuxMatchedge

focal focalMatch7.68.0-1ubuntu2debian

AND

focal focalMatch7.68.0-1ubuntu2.2debian

AND

focal focalMatch7.68.0-1ubuntu2.7debian

AND

debian debian_linux

google bionicMatch7.58.0-2ubuntu3.10debian

AND

google bionicMatch7.58.0-2ubuntu3.15debian

AND

google bionicMatch7.58.0-2ubuntu3debian

AND

debian debian_linux

curl curlMatch7.72.0-1debian

AND

debian debian_linuxMatch999

curl curlMatch7.72.0-1debian

AND

curl curlMatch7.74.0-1.3+b1debian

AND

debian debian_linuxMatch11

curl curlMatch7.64.0-4+deb10u1debian

AND

curl curlMatch7.64.0-4+deb10u2debian

AND

debian debian_linuxMatch10

curl curlMatch7.61.1_14.el8

curl curlMatch7.61.1_14.el8_3.1

curl curlMatch7.61.1_11.el8

curl curlMatch7.61.1_18.el8_4.1

curl curlMatch7.61.1_12.el8

curl curlMatch7.61.1_21.el8

curl curlMatch7.61.1_17.el8

curl curlMatch7.61.1_18.el8

curl curlMatch7.61.1_8.el8

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2022/08/msg00017.html
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.12/main.yaml
secdb	www.secdb.alpinelinux.org/v3.14/main.yaml
secdb	www.secdb.alpinelinux.org/v3.13/main.yaml
secdb	www.secdb.alpinelinux.org/v3.15/main.yaml
debian	www.debian.org/security/2022/dsa-5197
security	www.security.gentoo.org/glsa/202212-01
hackerone	www.hackerone.com/reports/1526328
security	www.security.netapp.com/advisory/ntap-20220609-0008/

27 Mar 2024 17:13Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25.5

CVSS 3.18.1

EPSS0.01914