An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
Required
User action required
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
None
No data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products 20
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Haxx Curl
cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*
|
4.9
|
<= 7.82.0
|
|
Debian Debian_Linux
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
|
— | — |
|
Debian Debian_Linux
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
|
— | — |
|
Netapp Hci_Bootstrap_Os
cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:*
|
— | — |
|
Netapp Hci_Compute_Node
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*
|
— | — |
|
Netapp Clustered_Data_Ontap
cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
|
— | — |
|
Netapp Solidfire_\&_Hci_Management_Node
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*
|
— | — |
|
Netapp Solidfire_\&_Hci_Storage_Node
cpe:2.3:a:netapp:solidfire_\&_hci_storage_node:-:*:*:*:*:*:*:*
|
— | — |
|
Brocade Fabric_Operating_System
cpe:2.3:o:brocade:fabric_operating_system:-:*:*:*:*:*:*:*
|
— | — |
|
Netapp H300s_Firmware
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Netapp H300s
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*
|
— | — |
|
Netapp H500s_Firmware
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Netapp H500s
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*
|
— | — |
|
Netapp H700s_Firmware
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Netapp H700s
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*
|
— | — |
|
Netapp H410s_Firmware
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Netapp H410s
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*
|
— | — |
|
Splunk Universal_Forwarder
cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*
|
8.2.0
|
8.2.12
|
|
Splunk Universal_Forwarder
cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*
|
9.0.0
|
9.0.6
|
|
Splunk Universal_Forwarder
cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*
|
— | — |
References 5
https://hackerone.com/reports/1543773
support@hackerone.com
https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
support@hackerone.com
https://security.gentoo.org/glsa/202212-01
support@hackerone.com
https://security.netapp.com/advisory/ntap-20220609-0008/
support@hackerone.com
https://www.debian.org/security/2022/dsa-5197
support@hackerone.com