CVE-2011-2192

The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential…

published July 7, 2011

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02877 · 86.7th percentile
Published
2011-07-07T21:00Z
EPSS history
Timeline
  • 07 JUL 21:00Z
    The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential…
    cvelistv5