cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2014-02-02 00:55
Updated : 2018-10-09 19:35
NVD link : CVE-2014-0015
Mitre link : CVE-2014-0015
CVE.ORG link : CVE-2014-0015
JSON object : View
Products Affected
haxx
- libcurl
- curl
CWE
CWE-287
Improper Authentication