CVE-2022-27774 Information disclosure in https://github.com/curl/curl
An attacker can extract credentials when curl follows HTTP(S) redirects with authentication, leaking them to other services on different protocols or ports.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2022-27774?
CVE-2022-27774 is a medium-severity vulnerability in Broadcom Fabric Operating System, published on 1 Jun 2022. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.
Weakness: CWE-522
Which versions are affected by CVE-2022-27774?
It affects 12 products.
Products include Broadcom Fabric Operating System, Debian Debian Linux, Haxx Curl, Netapp Clustered Data Ontap, Netapp H300s Firmware, Netapp H410s Firmware and 6 more.
How do I fix CVE-2022-27774?
Upgrade to a fixed version.
Is CVE-2022-27774 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-27774 exists.
Other vulnerabilities in Broadcom Fabric Operating System
Sources
Also known as ALPINE-CVE-2022-27774, CLEANSTART-2026-EH65930, CURL-CVE-2022-27774, DEBIAN-CVE-2022-27774, GHSA-7xmh-mw7w-rr97, JLSEC-2026-386 and 1 more.