A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.
References
Link | Resource |
---|---|
https://hackerone.com/reports/1553598 | Exploit Third Party Advisory |
https://security.netapp.com/advisory/ntap-20220609-0009/ | Third Party Advisory |
https://www.oracle.com/security-alerts/cpujul2022.html | Patch Third Party Advisory |
https://security.netapp.com/advisory/ntap-20220729-0004/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
AND |
|
Configuration 8 (hide)
|
Information
Published : 2022-06-02 07:15
Updated : 2023-02-28 07:42
NVD link : CVE-2022-27778
Mitre link : CVE-2022-27778
JSON object : View
CWE
CWE-706
Use of Incorrectly-Resolved Name or Reference
Products Affected
netapp
- hci_compute_node
- clustered_data_ontap
- h300s
- bh500s_firmware
- h500s
- oncommand_insight
- solidfire_\&_hci_management_node
- h410s
- hci_compute_node_firmware
- active_iq_unified_manager
- h700s
- h410s_firmware
- oncommand_workflow_automation
- snapcenter
- h700s_firmware
- h300s_firmware
oracle
- mysql_server
haxx
- curl