CVE-2022-27774: Brocade Fabric Operating System

Medium severity, CVSS 5.7. EPSS: 1.8% chance of exploitation in the next 30 days.

An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.

Affected products

• Brocade Fabric Operating System: affected versions not specified
• Debian Debian Linux: version 10.0 only; version 11.0 only
• Haxx Curl: from 4.9, up to and including 7.82.0
• Netapp Clustered Data Ontap: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Hci Bootstrap OS: affected versions not specified
• Netapp Solidfire & Hci Management Node: affected versions not specified
• Netapp Solidfire & Hci Storage Node: affected versions not specified
• Splunk Universal Forwarder: from 8.2.0, before 8.2.12 (fixed in 8.2.12); from 9.0.0, before 9.0.6 (fixed in 9.0.6); version 9.1.0 only

Published 2022-06-02. Last modified 2026-06-17.