CVE:CVE-2022-27778
CNNVD:CNNVD-202205-3032
curl是一款用于从服务器传输数据或向服务器传输数据的工具。
curl 7.83.0 版本存在安全漏洞，该漏洞源于curl命令行工具在--no-clobber 与 --remove-on-error 一起使用时可能会误删除文件。远程攻击者可以利用该漏洞骗受害者连接到恶意服务器并强制用命令行工具删除。
solution:Upgrade haxx curl to a higher version than 7.83.0,and avoid the version 7.83.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp bh500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp hci_compute_node_firmware to a higher version than -; Upgrade oracle mysql_server to a higher version than 5.7.38,8.0.29,and avoid the version (,5.7.38],[8.0.0,8.0.29]