CVE:CVE-2022-22576
CNNVD:CNNVD-202204-4500
curl是一款用于从服务器传输数据或向服务器传输数据的工具。
curl 存在访问控制错误漏洞，该漏洞源于应用重用OAUTH2身份验证的连接。无需正确确保使用为此传输设置的相同凭据对连接进行身份验证。攻击者利用该漏洞可以实现身份验证绕过。
solution:Upgrade haxx curl to a higher version than 7.83.0,and avoid the version [7.33.0,7.83.0); Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp solidfire_&_hci_storage_node to a higher version than -; Upgrade brocade fabric_operating_system to a higher version than -; Upgrade netapp bootstrap_os to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -