1 matches found
curl: Windows SSPI connection-pool probe can reuse a connection under the wrong user
Summary: A fresh transfer can reuse a keep-alive connection authenticated under another Windows user because the SSPI isolation check trusts a connection ID that a health probe can set. Root cause: Curlcpoolconnseemshealthy calls Curlattachconnection, which sets data-state.recentconnid, while...
5.9AI score
SaveExploits0
20