Lucene search

K
cve[email protected]CVE-2014-0015
HistoryFeb 02, 2014 - 12:55 a.m.

CVE-2014-0015

2014-02-0200:55:05
CWE-287
web.nvd.nist.gov
99
cve-2014-0015
curl
libcurl
ntlm
authentication
vulnerability

6.2 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

0.008 Low

EPSS

Percentile

81.1%

cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.

Affected configurations

NVD
Node
haxxlibcurlMatch7.10.6
OR
haxxlibcurlMatch7.10.7
OR
haxxlibcurlMatch7.10.8
OR
haxxlibcurlMatch7.11.0
OR
haxxlibcurlMatch7.11.1
OR
haxxlibcurlMatch7.11.2
OR
haxxlibcurlMatch7.12.0
OR
haxxlibcurlMatch7.12.1
OR
haxxlibcurlMatch7.12.2
OR
haxxlibcurlMatch7.12.3
OR
haxxlibcurlMatch7.13.0
OR
haxxlibcurlMatch7.13.1
OR
haxxlibcurlMatch7.13.2
OR
haxxlibcurlMatch7.14.0
OR
haxxlibcurlMatch7.14.1
OR
haxxlibcurlMatch7.15.0
OR
haxxlibcurlMatch7.15.1
OR
haxxlibcurlMatch7.15.2
OR
haxxlibcurlMatch7.15.3
OR
haxxlibcurlMatch7.15.4
OR
haxxlibcurlMatch7.15.5
OR
haxxlibcurlMatch7.16.0
OR
haxxlibcurlMatch7.16.1
OR
haxxlibcurlMatch7.16.2
OR
haxxlibcurlMatch7.16.3
OR
haxxlibcurlMatch7.16.4
OR
haxxlibcurlMatch7.17.0
OR
haxxlibcurlMatch7.17.1
OR
haxxlibcurlMatch7.18.0
OR
haxxlibcurlMatch7.18.1
OR
haxxlibcurlMatch7.18.2
OR
haxxlibcurlMatch7.19.0
OR
haxxlibcurlMatch7.19.1
OR
haxxlibcurlMatch7.19.2
OR
haxxlibcurlMatch7.19.3
OR
haxxlibcurlMatch7.19.4
OR
haxxlibcurlMatch7.19.5
OR
haxxlibcurlMatch7.19.6
OR
haxxlibcurlMatch7.19.7
OR
haxxlibcurlMatch7.20.0
OR
haxxlibcurlMatch7.20.1
OR
haxxlibcurlMatch7.21.0
OR
haxxlibcurlMatch7.21.1
OR
haxxlibcurlMatch7.21.2
OR
haxxlibcurlMatch7.21.3
OR
haxxlibcurlMatch7.21.4
OR
haxxlibcurlMatch7.21.5
OR
haxxlibcurlMatch7.21.6
OR
haxxlibcurlMatch7.21.7
OR
haxxlibcurlMatch7.22.0
OR
haxxlibcurlMatch7.23.0
OR
haxxlibcurlMatch7.23.1
OR
haxxlibcurlMatch7.24.0
OR
haxxlibcurlMatch7.25.0
OR
haxxlibcurlMatch7.26.0
OR
haxxlibcurlMatch7.27.0
OR
haxxlibcurlMatch7.28.0
OR
haxxlibcurlMatch7.28.1
OR
haxxlibcurlMatch7.29.0
OR
haxxlibcurlMatch7.30.0
OR
haxxlibcurlMatch7.31.0
OR
haxxlibcurlMatch7.32.0
OR
haxxlibcurlMatch7.33.0
OR
haxxlibcurlMatch7.34.0
Node
haxxcurlMatch7.10.6
OR
haxxcurlMatch7.10.7
OR
haxxcurlMatch7.10.8
OR
haxxcurlMatch7.11.0
OR
haxxcurlMatch7.11.1
OR
haxxcurlMatch7.11.2
OR
haxxcurlMatch7.12.0
OR
haxxcurlMatch7.12.1
OR
haxxcurlMatch7.12.2
OR
haxxcurlMatch7.12.3
OR
haxxcurlMatch7.13.0
OR
haxxcurlMatch7.13.1
OR
haxxcurlMatch7.13.2
OR
haxxcurlMatch7.14.0
OR
haxxcurlMatch7.14.1
OR
haxxcurlMatch7.15.0
OR
haxxcurlMatch7.15.1
OR
haxxcurlMatch7.15.2
OR
haxxcurlMatch7.15.3
OR
haxxcurlMatch7.15.4
OR
haxxcurlMatch7.15.5
OR
haxxcurlMatch7.16.0
OR
haxxcurlMatch7.16.1
OR
haxxcurlMatch7.16.2
OR
haxxcurlMatch7.16.3
OR
haxxcurlMatch7.16.4
OR
haxxcurlMatch7.17.0
OR
haxxcurlMatch7.17.1
OR
haxxcurlMatch7.18.0
OR
haxxcurlMatch7.18.1
OR
haxxcurlMatch7.18.2
OR
haxxcurlMatch7.19.0
OR
haxxcurlMatch7.19.1
OR
haxxcurlMatch7.19.2
OR
haxxcurlMatch7.19.3
OR
haxxcurlMatch7.19.4
OR
haxxcurlMatch7.19.5
OR
haxxcurlMatch7.19.6
OR
haxxcurlMatch7.19.7
OR
haxxcurlMatch7.20.0
OR
haxxcurlMatch7.20.1
OR
haxxcurlMatch7.21.0
OR
haxxcurlMatch7.21.1
OR
haxxcurlMatch7.21.2
OR
haxxcurlMatch7.21.3
OR
haxxcurlMatch7.21.4
OR
haxxcurlMatch7.21.5
OR
haxxcurlMatch7.21.6
OR
haxxcurlMatch7.21.7
OR
haxxcurlMatch7.22.0
OR
haxxcurlMatch7.23.0
OR
haxxcurlMatch7.23.1
OR
haxxcurlMatch7.24.0
OR
haxxcurlMatch7.25.0
OR
haxxcurlMatch7.26.0
OR
haxxcurlMatch7.27.0
OR
haxxcurlMatch7.28.0
OR
haxxcurlMatch7.28.1
OR
haxxcurlMatch7.29.0
OR
haxxcurlMatch7.30.0
OR
haxxcurlMatch7.31.0
OR
haxxcurlMatch7.32.0
OR
haxxcurlMatch7.33.0
OR
haxxcurlMatch7.34.0

References

6.2 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

0.008 Low

EPSS

Percentile

81.1%