CVE-2015-3143

cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an…

published April 24, 2015

CVSS
—
EPSS
11%
Percentile
95.9
In the wild
Unconfirmed
What it is

cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11149 · 95.9th percentile
Published
2015-04-24T14:00Z
EPSS history
Timeline
  • 24 APR 14:00Z
    cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an…
    cvelistv5