CVE-2021-22946
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.
- CVSS 3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- 4.5% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-25)
- CWEs
- CWE-319, CWE-325
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:macos
- debian:debian_linux
- fedoraproject:fedora
- haxx:curl
- netapp:cloud_backup
- netapp:clustered_data_ontap
- netapp:h300e_firmware
- netapp:h300s_firmware
- netapp:h410s_firmware
- netapp:h500e_firmware
- netapp:h500s_firmware
- netapp:h700e_firmware
- netapp:h700s_firmware
- netapp:oncommand_insight
- netapp:oncommand_workflow_automation
- netapp:snapcenter
- netapp:solidfire_baseboard_management_controller_firmware
- oracle:commerce_guided_search
- oracle:communications_cloud_native_core_binding_support_function
- oracle:communications_cloud_native_core_console
- oracle:communications_cloud_native_core_network_function_cloud_native_environment
- oracle:communications_cloud_native_core_network_repository_function
- oracle:communications_cloud_native_core_network_slice_selection_function
- oracle:communications_cloud_native_core_security_edge_protection_proxy
- oracle:communications_cloud_native_core_service_communication_proxy
- oracle:mysql_server
- oracle:peoplesoft_enterprise_peopletools
- siemens:sinec_infrastructure_network_services
- splunk:universal_forwarder