Information Disclosure

🗓️ 13 May 2022 11:58:33Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 31 Views

curl vulnerability cleartext transmission sensitive informatio

Reporter	Title	Published	Views	Family All 76
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	23 Sep 202222:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libcURL affect IBM Rational ClearCase ( CVE-2022-27778, CVE-2022-27779, CVE-2022-27780, CVE-2022-27782, CVE-2022-30115, CVE-2022-27774 )	25 Jul 202214:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent and Base Module use libcurl with multiple known vulnerabilities	6 Oct 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is vulnerable to issues with libcurl (CVE-2022-27780, CVE-2022-30115)	25 Aug 202215:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities fixed in 9.7.2.7	24 Oct 202411:46	–	ibm
FreeBSD	curl -- Multiple vulnerabilities	11 May 202200:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 10 package curl version 7.83.1-alt1	19 May 202200:00	–	altlinux
ATTACKERKB	CVE-2022-30115	2 Jun 202214:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : curl, curl-minimal, libcurl (ALAS2022-2022-065)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : curl, curl-minimal, libcurl (ALAS2022-2022-206)	4 Nov 202200:00	–	nessus

Vulners

Node

curl curlMatch7.81.0-r0os

AND

curl curlMatch7.81.0-r1os

AND

curl curlMatch7.79.0-r0os

AND

curl curlMatch7.76.1-r0os

AND

curl curlMatch7.77.0-r0os

AND

curl curlMatch7.79.1-r0os

AND

curl curlMatch7.78.0-r2os

AND

curl curlMatch7.77.0-r1os

AND

curl curlMatch7.69.0-r1os

AND

curl curlMatch7.69.0-r0os

AND

curl curlMatch7.78.0-r0os

AND

curl curlMatch7.69.1-r0os

AND

curl curlMatch7.76.0-r0os

AND

curl curlMatch7.75.0-r0os

AND

curl curlMatch7.80.0-r0os

AND

curl curlMatch7.83.0-r0os

AND

curl curlMatch7.68.0-r0os

AND

curl curlMatch7.82.0-r0os

AND

alpinelinux alpine_linuxMatchedge

curl curlMatch7.72.0-1debian

AND

debian debian_linuxMatch999

curl curlMatch7.83.0-r0os

AND

alpinelinux alpine_linuxMatch3.16

Source	Link
access	www.access.redhat.com/security/cve/cve-2022-30115
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/curl/curl/commit/b27ad8e1d3e68e
secdb	www.secdb.alpinelinux.org/edge/main.yaml
security	www.security.gentoo.org/glsa/202212-01
hackerone	www.hackerone.com/reports/1557449
security	www.security.netapp.com/advisory/ntap-20220609-0009/
openwall	www.openwall.com/lists/oss-security/2022/10/26/4
openwall	www.openwall.com/lists/oss-security/2022/12/21/1

27 Mar 2024 17:12Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24

CVSS 3.14.3

EPSS0.01118

curl url.c vulnerability sensitive information access attacker software