PT-2022-2590 · Curl+11 · Curl+11
Harry Sintonen
·
Published
2022-04-21
·
Updated
2026-05-18
·
CVE-2022-27776
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
curl versions prior to 7.83.0
Description
The issue is related to a insufficiently protected credentials vulnerability that may leak authentication or cookie header data on HTTP redirects to the same host but another port number. This could allow a remote attacker to incorrectly send the same set of headers to hosts that are identical to the first one but use a different port number or URL scheme. The vulnerability affects applications that pass on custom
Authorization: or Cookie: headers, which often contain sensitive information.Recommendations
For versions prior to 7.83.0, update to curl 7.83.0 to fix the vulnerability. As a temporary workaround, consider using options that allow users to opt out from the flawed check, but note that this is not set by default. Restrict access to sensitive information and avoid using custom
Authorization: or Cookie: headers in HTTP requests until the issue is resolved.Exploit
Fix
Insufficiently Protected Credentials
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Windows
Curl