cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2014-02-01 16:55
Updated : 2018-10-09 12:35
NVD link : CVE-2014-0015
Mitre link : CVE-2014-0015
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
haxx
- curl
- libcurl