CURL-CVE-2015-3153 sensitive HTTP server headers also sent to proxies

🗓️ 29 Apr 2015 08:00:00Reported by GoogleType

osv

osv🔗 osv.dev👁 4 Views

Custom HTTP headers sent to proxies can expose sensitive information unintentionally.

Reporter	Title	Published	Views	Family All 65
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Flex System Chassis Management Module	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect IBM Security Network Intrusion Prevention System	23 Feb 202219:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect Power Hardware Management Console (CVE-2015-3143 CVE-2015-3148 CVE-2015-3153 CVE-2014-3613 CVE-2014-3707 CVE-2014-8150)	23 Sep 202101:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cURL component shipped with IBM Rational ClearCase (CVE-2015-3153)	10 Jul 201808:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libcurl and cURL affect Rational DOORS (CVE-2015-3143, CVE-2015-3144, CVE-2015-3145, CVE-2015-3148, CVE-2015-3153, CVE-2015-3236)	1 May 202008:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM)	18 Jun 201801:30	–	ibm
FreeBSD	cURL -- sensitive HTTP server headers also sent to proxies	29 Apr 201500:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.42.1-alt1	29 Apr 201500:00	–	altlinux
Tenable Nessus	cURL / libcURL 7.x < 7.42.1 Proxied Traffic HTTP Server Header Remote Disclosure	15 Sep 201500:00	–	nessus
Tenable Nessus	Mac OS X < 10.10.5 Multiple Vulnerabilities	16 Oct 201500:00	–	nessus

27 May 2026 02:29Current

9.3High risk

Vulners AI Score9.3

CVSS 25

EPSS0.08372

custom http headers sensitive information http proxy curlopt_httpheader curlopt_headeropt