CVE-2022-22576 Auth bypass in https://github.com/curl/curl

What is CVE-2022-22576?

CVE-2022-22576 is a high-severity authentication bypass vulnerability in Broadcom Fabric Operating System, published on 26 May 2022. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).

Weakness: CWE-306, CWE-287

Which versions are affected by CVE-2022-22576?

It affects 12 products.

Products include Broadcom Fabric Operating System, Debian Debian Linux, Haxx Curl, Netapp Bootstrap Os, Netapp Clustered Data Ontap, Netapp H300s Firmware and 6 more.

How do I fix CVE-2022-22576?

Upgrade to a fixed version.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2022-22576 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-22576 exists.

Other vulnerabilities in Broadcom Fabric Operating System

• CVE-2025-1976 Broadcom Brocade Fabric OS Code Injection Exploited High 8.6
• CVE-2021-22555 Linux Kernel Heap Out-of-Bounds Write Exploited High 8.3
• CVE-2022-33186 Command injection in Brocade Fabric OS Critical 9.8
• CVE-2021-27797 Hardcoded credentials in Brocade Fabric OS Critical 9.8
• CVE-2020-15371 Code injection in Brocade Fabric OS Critical 9.8

All Broadcom Fabric Operating System vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as ALPINE-CVE-2022-22576, CLEANSTART-2026-YE34914, CLSA-2022-1655317708, CLSA-2022-1655317984, CLSA-2022-1655819051, CURL-CVE-2022-22576 and 5 more.