VULNERABILITY INTELLIGENCE

CVE-2015-3148

CVSS score5 MEDIUM
EPSS probability14.15%
CISA KEVNot currently listed
Published2015-04-24
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.

Weakness classification

  • CWE-284: Improper Access Control

Primary references