CVEvulnerability

CVE-2022-27778

8.1 HIGH Published 2022-06-02 Modified 2026-10-14 Official page ↗
Status
Modified
Published
2022-06-02
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
Weaknesses
CWE-706

Description

A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.

Affected configurations

• haxx curl 7.83.0 • netapp active iq unified manager • netapp clustered data ontap • netapp oncommand insight • netapp oncommand workflow automation • netapp snapcenter • netapp solidfire \& hci management node • netapp h300s firmware • netapp bh500s firmware • netapp h700s firmware • netapp h410s firmware • netapp hci compute node firmware • oracle mysql server (<= 5.7.38) • oracle mysql server (>= 8.0.0 <= 8.0.29) • splunk universal forwarder (>= 8.2.0 < 8.2.12) • splunk universal forwarder (>= 9.0.0 < 9.0.6) • splunk universal forwarder 9.1.0

Related

Weakness · CWE (1)

  • CWE-706 Use of Incorrectly-Resolved Name or Reference weakness

References