Credential Exposure

🗓️ 10 Feb 2025 05:33:40Reported by Veracode Vulnerability DatabaseType

Curl vulnerability allows credential exposure through improper handling of .netrc files.

Reporter	Title	Published	Views	Family All 111
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to sensitive information disclosure (CVE-2025-0167, CVE-2024-11053) and a denial of service (CVE-2024-9681) due to cURL libcurl	10 Jun 202514:37	–	ibm
Tenable Nessus	Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2025-1351)	8 Jan 202600:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: curl / mysql (CVE-2025-0167)	13 Apr 202500:00	–	nessus
Tenable Nessus	Curl 7.76.0 < 8.12.0 Default Credential Leak (CVE-2025-0167)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : curl (EulerOS-SA-2025-1313)	1 Apr 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : curl (EulerOS-SA-2025-1330)	1 Apr 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : curl (EulerOS-SA-2025-1349)	11 Apr 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : curl (EulerOS-SA-2025-1350)	11 Apr 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : curl (EulerOS-SA-2025-1407)	6 May 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : curl (EulerOS-SA-2025-1408)	6 May 202500:00	–	nessus

Vulners

Node

curl curlMatch7.72.0-1debian

AND

libcurl.so libcurl.soRange2.0.2.debug–4.7.0cpp

Source	Link
github	www.github.com/curl/curl/commit/0e120c5b925e8ca75d5319e
curl	www.curl.se/docs/CVE-2025-0167.html
github	www.github.com/curl/curl/pull/15908
hackerone	www.hackerone.com/reports/2917232
curl	www.curl.se/docs/CVE-2025-0167.json
github	www.github.com/advisories/GHSA-c42g-rmxf-64ch
security	www.security.netapp.com/advisory/ntap-20250306-0008/

30 Jul 2025 21:33Current

3.7Low risk

Vulners AI Score3.7

CVSS 3.13.4

EPSS0.00331

SSVC