CVE-2015-3153

Published May 1, 2015

Last updated 18 days ago

Overview

Description
The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.
Source
secalert@redhat.com
NVD status
Modified
Products
enterprise_manager_ops_center, curl, libcurl, ubuntu_linux, mac_os_x, debian_linux

Risk scores

CVSS 2.0

Type
Primary
Base score
5
Impact score
2.9
Exploitability score
10
Vector string
AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov
CWE-200

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.