VULNERABILITY INTELLIGENCE
CVE-2016-7141
CVSS score7.5 HIGH
EPSS probability8.18%
CISA KEVNot currently listed
Published2016-10-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Description
curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- cve@mitre.org — Third Party Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org
- cve@mitre.org — Issue Tracking
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Issue Tracking, Patch
- cve@mitre.org
- cve@mitre.org