cURL and libcurl 7.40.0 up to and including 7.42.1 send the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote malicious users to obtain sensitive information via unspecified vectors.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
haxx curl 7.42.1 |
||
haxx libcurl 7.40.0 |
||
haxx curl 7.40.0 |
||
haxx curl 7.41.0 |
||
haxx curl 7.42.0 |
||
haxx libcurl 7.42.1 |
||
haxx libcurl 7.41.0 |
||
haxx libcurl 7.42.0 |
Vulmon