CVE:CVE-2022-27774
CNNVD:CNNVD-202204-4501
curl是一款用于从服务器传输数据或向服务器传输数据的工具。
curl 存在信息泄露漏洞，该漏洞源于当它遵循从受身份验证保护的 HTTP(S) URL 到其他协议和端口号的重定向时，此安全漏洞允许将凭据泄露给其他服务器。
solution:Upgrade haxx curl to a higher version than 7.82.0,and avoid the version [4.9,7.82.0]; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade netapp hci_bootstrap_os to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp solidfire_&_hci_storage_node to a higher version than -; Upgrade brocade fabric_operating_system to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -