Authentication Bypass

🗓️ 21 Mar 2023 00:27:47Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 50 Views

Curl vulnerability FTP settings reused, leading to wrong credentials

Reporter	Title	Published	Views	Family All 215
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by vulnerabilities in libcURL (CVE-2023-23916, CVE-2023-27535)	22 Jun 202317:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	15 Jun 202317:06	–	ibm
IBM Security Bulletins	Security Bulletin: cURL as used by IBM QRadar WinCollect Agent contains multiple vulnerabilities	8 Jun 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by libcurl vulnerability	11 Oct 202311:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Progress DataDirect Connect for ODBC	26 Mar 202503:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL libcurl might affect IBM Spectrum Copy Data Management	15 Sep 202313:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple publicly disclosed Libcurl vulnerabilities affect IBM Safer Payments	16 May 202322:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from curl, go and apr-util	16 Jun 202304:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Improper Authentication in the RHEL UBI (CVE-2023-27535)	19 Jan 202422:05	–	ibm

Vulners

Node

curl curlMatch7.81.0-r0os

AND

curl curlMatch7.87.0-r3os

AND

curl curlMatch7.68.0-r0os

AND

curl curlMatch7.87.0-r1os

AND

curl curlMatch7.84.0-r0os

AND

curl curlMatch7.78.0-r0os

AND

curl curlMatch7.77.0-r1os

AND

curl curlMatch7.83.0-r0os

AND

curl curlMatch7.81.0-r1os

AND

curl curlMatch7.79.0-r0os

AND

curl curlMatch7.86.0-r1os

AND

curl curlMatch7.76.0-r0os

AND

curl curlMatch7.69.0-r1os

AND

curl curlMatch7.69.1-r0os

AND

curl curlMatch7.77.0-r0os

AND

curl curlMatch7.76.1-r0os

AND

curl curlMatch7.80.0-r0os

AND

curl curlMatch7.85.0-r0os

AND

curl curlMatch7.87.0-r0os

AND

curl curlMatch7.84.0-r2os

AND

curl curlMatch7.69.0-r0os

AND

curl curlMatch7.82.0-r0os

AND

curl curlMatch7.78.0-r2os

AND

curl curlMatch7.83.1-r1os

AND

curl curlMatch7.88.1-r1os

AND

curl curlMatch7.79.1-r0os

AND

curl curlMatch7.84.0-r1os

AND

curl curlMatch7.75.0-r0os

AND

alpinelinux alpine_linuxMatchedge

curl curlMatch7.87.0-r2os

AND

curl curlMatch7.87.0-r0os

AND

curl curlMatch7.87.0-r1os

AND

curl curlMatch7.86.0-r1os

AND

curl curlMatch7.88.1-r0os

AND

alpinelinux alpine_linuxMatch3.17

focal focalMatch7.68.0-1ubuntu2debian

AND

focal focalMatch7.68.0-1ubuntu2.7debian

AND

focal focalMatch7.68.0-1ubuntu2.2debian

AND

debian debian_linux

google bionicMatch7.58.0-2ubuntu3debian

AND

google bionicMatch7.58.0-2ubuntu3.15debian

AND

google bionicMatch7.58.0-2ubuntu3.10debian

AND

debian debian_linux

curl curlMatch7.83.1-r1os

AND

curl curlMatch7.83.0-r0os

AND

curl curlMatch7.83.1-r6os

AND

curl curlMatch7.83.1-r5os

AND

curl curlMatch7.83.1-r3os

AND

curl curlMatch7.83.1-r4os

AND

curl curlMatch7.83.1-r2os

AND

alpinelinux alpine_linuxMatch3.16

curl curlMatch7.80.0-r2os

AND

curl curlMatch7.80.0-r3os

AND

curl curlMatch7.79.1-r0os

AND

curl curlMatch7.80.0-r1os

AND

curl curlMatch7.80.0-r4os

AND

curl curlMatch7.80.0-r6os

AND

curl curlMatch7.80.0-r5os

AND

curl curlMatch7.80.0-r0os

AND

alpinelinux alpine_linuxMatch3.15

curl curlMatch7.79.1-r2os

AND

curl curlMatch7.77.0-r1os

AND

curl curlMatch7.79.0-r0os

AND

curl curlMatch7.79.1-r5os

AND

curl curlMatch7.78.0-r0os

AND

curl curlMatch7.79.1-r1os

AND

curl curlMatch7.79.1-r3os

AND

curl curlMatch7.77.0-r0os

AND

curl curlMatch7.79.1-r0os

AND

curl curlMatch7.79.1-r4os

AND

alpinelinux alpine_linuxMatch3.14

curl curlMatch7.64.0-4+deb10u1debian

AND

curl curlMatch7.64.0-4+deb10u2debian

AND

debian debian_linuxMatch10

curl curlMatch7.72.0-1debian

AND

debian debian_linuxMatch999

curl curlMatch7.72.0-1debian

AND

curl curlMatch7.74.0-1.3+b1debian

AND

debian debian_linuxMatch11

curl curlMatch7.19.7_26.el6_1.1

curl curlMatch7.19.7_26.el6_1.2

curl curlMatch7.29.0_46.el7

curl curlMatch7.29.0_57.el7

curl curlMatch7.61.1_22.el8.3

curl curlMatch7.29.0_54.el7_7.1

curl curlMatch7.19.7_40.el6_6.4

curl curlMatch7.61.1_17.el8

curl curlMatch7.19.7_40.el6_6.3

curl curlMatch7.29.0_57.el7_8.1

curl curlMatch7.19.7_40.el6_6.1

curl curlMatch7.61.1_27.el8

curl curlMatch7.61.1_28.el8

curl curlMatch7.61.1_29.el8

curl curlMatch7.19.7_46.el6

curl curlMatch7.19.7_16.el6

curl curlMatch7.61.1_18.el8

curl curlMatch7.19.7_52.el6

curl curlMatch7.29.0_59.el7_9.1

curl curlMatch7.19.7_37.el6_4

curl curlMatch7.29.0_54.el7

curl curlMatch7.61.1_12.el8

curl curlMatch7.61.1_22.el8

curl curlMatch7.61.1_14.el8_3.1

curl curlMatch7.61.1_18.el8_4.1

curl curlMatch7.29.0_51.el7_6.3

curl curlMatch7.61.1_8.el8

curl curlMatch7.19.7_35.el6

curl curlMatch7.19.7_54.el6_10

curl curlMatch7.29.0_51.el7

curl curlMatch7.61.1_26.el8

curl curlMatch7.19.7_36.el6_4

curl curlMatch7.29.0_32.el7

curl curlMatch7.19.7_37.el6_5.3

curl curlMatch7.61.1_14.el8

curl curlMatch7.19.7_26.el6_2.4

curl curlMatch7.29.0_59.el7

curl curlMatch7.61.1_11.el8

curl curlMatch7.19.7_26.el6

curl curlMatch7.29.0_54.el7_7.2

curl curlMatch7.19.7_53.el6_9

curl curlMatch7.61.1_21.el8

curl curlMatch7.61.1_25.el8

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2023/04/msg00025.html
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.17/main.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
security	www.security.gentoo.org/glsa/202310-12
hackerone	www.hackerone.com/reports/1892780
security	www.security.netapp.com/advisory/ntap-20230420-0010/

27 Mar 2024 17:10Current

8.5High risk

Vulners AI Score8.5

CVSS 3.15.9

EPSS0.00036