CVE-2015-3148

cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via…

published April 24, 2015

CVSS
—
EPSS
14%
Percentile
96.6
In the wild
Unconfirmed
What it is

cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14150 · 96.6th percentile
Published
2015-04-24T14:00Z
EPSS history
Timeline
  • 24 APR 14:00Z
    cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via…
    cvelistv5