CVE:CVE-2022-27776
CNNVD:CNNVD-202204-4522
curl是一款用于从服务器传输数据或向服务器传输数据的工具。
curl 存在信息泄露漏洞。此安全漏洞允许泄漏身份验证或 HTTP 上的 cookie 标头数据重定向到同一主机但另一个端口号。 对于传递自定义 Authorization: 或 Cookie: 标头的应用程序而言，将同一组标头发送到不同端口号上的服务器是一个问题。 这些标头通常包含隐私敏感信息或数据。
solution:Upgrade haxx curl to a higher version than 7.83.0,and avoid the version (,7.83.0); Upgrade fedoraproject fedora to a higher version than 36,37,and avoid the version 36,37; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade netapp hci_bootstrap_os to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp solidfire_&_hci_storage_node to a higher version than -; Upgrade brocade fabric_operating_system to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -