Vulnerability Details : CVE-2022-30115

Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing dot while not using one when it built the HSTS cache. Or the otherway around - by having the trailing dot in the HSTS cache and *not* using thetrailing dot in the URL.
Publish Date : 2022-06-02 Last Update Date : 2023-01-05

Collapse All Expand All Select Select&Copy	Scroll To Vendor Statements(0) Additional Vendor Data(0) OVAL Definitions(0) Vulnerable Products(0) # Of Vulns By Products References(0) Metasploit Modules(0)	Comments View User Comments Add Comment	External Links Secunia Advisories XForce Advisories Vulnerability Details at NVD Vulnerability Details at Mitre Nessus Plugins Linux Kernel Git Repository First CVSS Guide
Search Twitter Search YouTube Search Google

- CVSS Scores & Vulnerability Types

CVSS Score	4.0
Confidentiality Impact	Partial (There is considerable informational disclosure.)
Integrity Impact	None (There is no impact to the integrity of the system)
Availability Impact	None (There is no impact to the availability of the system.)
Access Complexity	Low (Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication	???
Gained Access	None
Vulnerability Type(s)	Bypass a restriction or similar
CWE ID	319

- Products Affected By CVE-2022-30115

#	Product Type	Vendor	Product	Version	Update	Edition	Language
1	Application	Haxx	Curl	*	*	*	*	Version Details Vulnerabilities
2	Application	Netapp	Clustered Data Ontap	-	*	*	*	Version Details Vulnerabilities
3	Application	Netapp	Solidfire \& Hci Management Node	-	*	*	*	Version Details Vulnerabilities
4	Application	Netapp	Solidfire\, Enterprise Sds \& Hci Storage Node	-	*	*	*	Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor	Product	Vulnerable Versions
Haxx	Curl	1
Netapp	Clustered Data Ontap	1
Netapp	Solidfire \& Hci Management Node	1
Netapp	Solidfire\, Enterprise Sds \& Hci Storage Node	1

- References For CVE-2022-30115

http://www.openwall.com/lists/oss-security/2022/12/21/1
MLIST [oss-security] 20221221 curl: CVE-2022-43551: Another HSTS bypass via IDN

https://hackerone.com/reports/1557449

http://www.openwall.com/lists/oss-security/2022/10/26/4
MLIST [oss-security] 20221026 [SECURITY ADVISORY] CVE-2022-42916: HSTS bypass via IDN (curl)

https://security.netapp.com/advisory/ntap-20220609-0009/ CONFIRM

https://security.gentoo.org/glsa/202212-01
GENTOO GLSA-202212-01

- Vulnerability Conditions

Vulnerability is valid if product versions listed below are used 0
Netapp Solidfire\, Enterprise Sds \& Hci Storage Node * * * Netapp Solidfire \& Hci Management Node * * * Netapp Clustered Data Ontap * * * Haxx Curl * * * *	Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Hci Bootstrap Os * * * Netapp Hci Compute Node * * *
Vulnerability is valid if product versions listed below are used 0
Netapp Solidfire\, Enterprise Sds \& Hci Storage Node * * * Netapp Solidfire \& Hci Management Node * * * Netapp Clustered Data Ontap * * * Haxx Curl * * * *	Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Hci Bootstrap Os * * * Netapp Hci Compute Node * * *
Vulnerability is valid if product versions listed below are used 0
Netapp Solidfire\, Enterprise Sds \& Hci Storage Node * * * Netapp Solidfire \& Hci Management Node * * * Netapp Clustered Data Ontap * * * Haxx Curl * * * *	Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Hci Bootstrap Os * * * Netapp Hci Compute Node * * *
Vulnerability is valid if product versions listed below are used 0
Netapp Solidfire\, Enterprise Sds \& Hci Storage Node * * * Netapp Solidfire \& Hci Management Node * * * Netapp Clustered Data Ontap * * * Haxx Curl * * * *	Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Hci Bootstrap Os * * * Netapp Hci Compute Node * * *
Vulnerability is valid if product versions listed below are used 0
Netapp Solidfire\, Enterprise Sds \& Hci Storage Node * * * Netapp Solidfire \& Hci Management Node * * * Netapp Clustered Data Ontap * * * Haxx Curl * * * *	Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Hci Bootstrap Os * * * Netapp Hci Compute Node * * *
Vulnerability is valid if product versions listed below are used 0
Netapp Solidfire\, Enterprise Sds \& Hci Storage Node * * * Netapp Solidfire \& Hci Management Node * * * Netapp Clustered Data Ontap * * * Haxx Curl * * * *	Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Hci Bootstrap Os * * * Netapp Hci Compute Node * * *
Vulnerability is valid if product versions listed below are used 0
Netapp Solidfire\, Enterprise Sds \& Hci Storage Node * * * Netapp Solidfire \& Hci Management Node * * * Netapp Clustered Data Ontap * * * Haxx Curl * * * *	Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Hci Bootstrap Os * * * Netapp Hci Compute Node * * *

- Metasploit Modules Related To CVE-2022-30115

There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)