curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.
curl versiones 7.1.1 hasta 7.75.0 incluyéndola, es vulnerable a una "Exposure of Private Personal Information to an Unauthorized Actor" al filtrar credenciales en el encabezado HTTP Referer:. libcurl no elimina las credenciales de usuario de la URL cuando completa automáticamente el campo de encabezado de petición HTTP Referer: en peticiones HTTP salientes y, por lo tanto, corre el riesgo de filtrar datos confidenciales al servidor que es el objetivo de la segunda petición HTTP.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | LOW |
| Integrity Impact | NONE |
| Availability Impact | NONE |
AV:N/AC:L/Au:N/C:P/I:N/A:N
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-359
|
| [email protected] | Primary |
en
CWE-200
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| haxx | libcurl | * | <built-in method update of dict object at 0x7fd385054d80> | Application |
| fedoraproject | fedora | 32 | <built-in method update of dict object at 0x7fd3685321c0> | Operating System |
| fedoraproject | fedora | 33 | <built-in method update of dict object at 0x7fd34019c500> | Operating System |
| fedoraproject | fedora | 34 | <built-in method update of dict object at 0x7fd341543b80> | Operating System |
| netapp | hci_management_node | - | <built-in method update of dict object at 0x7fd385054300> | Application |
| netapp | solidfire | - | <built-in method update of dict object at 0x7fd385057480> | Application |
| netapp | hci_compute_node | - | <built-in method update of dict object at 0x7fd34b9c2040> | Hardware |
| netapp | hci_storage_node | - | <built-in method update of dict object at 0x7fd36041dc80> | Hardware |
| broadcom | fabric_operating_system | - | <built-in method update of dict object at 0x7fd34b9c3180> | Operating System |
| debian | debian_linux | 9.0 | <built-in method update of dict object at 0x7fd385055f80> | Operating System |
| siemens | sinec_infrastructure_network_services | * | <built-in method update of dict object at 0x7fd34019e6c0> | Application |
| oracle | communications_billing_and_revenue_management | 12.0.0.3.0 | <built-in method update of dict object at 0x7fd3685301c0> | Application |
| oracle | essbase | 21.2 | <built-in method update of dict object at 0x7fd34019de40> | Application |
| splunk | universal_forwarder | * | <built-in method update of dict object at 0x7fd34019c200> | Application |
| splunk | universal_forwarder | * | <built-in method update of dict object at 0x7fd34b9c3980> | Application |
| splunk | universal_forwarder | 9.1.0 | <built-in method update of dict object at 0x7fd34019f480> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:broadcom:fabric_operating_system:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:* |