Partial password leak over DNS on HTTP redirect

🗓️ 24 Jun 2020 08:00:00Reported by curlType

curl🔗 curl.se👁 2 Views

Partial password leakage over DNS during redirects if credentials set in curl options are not URL encoded.

Reporter	Title	Published	Views	Family All 96
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202123:48	–	ibm
IBM Security Bulletins	Security Bulletin: cURL vulnerabilities CVE-2020-8169 CVE-2020-8177 impact IBM Aspera Streaming/IBM Aspera Streaming for Video version 3.9.6.1 and earlier	8 Dec 202018:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to cURL vulnerabilities (CVE-2020-8169, CVE-2020-8177)	26 Feb 202113:18	–	ibm
IBM Security Bulletins	Security Bulletin: cURL vulnerabilities CVE-2020-8169 CVE-2020-8177 impact IBM Aspera High-Speed Transfer Server 3.9.6.2 and earlier and Aspera High-Speed Transfer Endpoint 3.9.6.2 and earlier	11 Dec 202018:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Curl affect PowerSC (CVE-2020-8169, CVE-2020-8177)	23 Oct 202020:38	–	ibm
FreeBSD	curl -- multiple vulnerabilities	24 Jun 202000:00	–	freebsd
AlpineLinux	CVE-2020-8169	14 Dec 202019:41	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в curl	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the software for interacting with servers using curl, related to errors in handling user credentials, allows a perpetrator to gain unauthorized access to protected information.	9 Jul 202000:00	–	bdu_fstec
CBLMariner	CVE-2020-8169 affecting package curl 7.68.0-5	11 Aug 202106:39	–	cbl_mariner