Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-3236
HistoryJun 22, 2015 - 7:59 p.m.

CVE-2015-3236

2015-06-2219:59:03
CWE-200
[email protected]
web.nvd.nist.gov
1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.0%

JSON

cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected configurations

NVD
Node
haxxcurlMatch7.40.0
OR
haxxcurlMatch7.41.0
OR
haxxcurlMatch7.42.0
OR
haxxcurlMatch7.42.1
OR
haxxlibcurlMatch7.40.0
OR
haxxlibcurlMatch7.41.0
OR
haxxlibcurlMatch7.42.0
OR
haxxlibcurlMatch7.42.1

Related

cvelist 1
debiancve 1
cve 1
ubuntucve 1
prion 1
nessus 6
amazon 1
fedora 1
freebsd 1
openvas 5
kaspersky 1
mageia 1
archlinux 1
altlinux 1
ibm 1
gentoo 1
slackware 1
securityvulns 1
oracle 4
cvelist
cvelist
CVE-2015-3236
2015-06-22 19:00:00
debiancve
debiancve
CVE-2015-3236
2015-06-22 19:59:03
cve
cve
CVE-2015-3236
2015-06-22 19:59:03
ubuntucve
ubuntucve
CVE-2015-3236
2015-06-17 00:00:00
prion
prion
Design/Logic Flaw
2015-06-22 19:59:00
nessus
nessus
openSUSE Security Update : curl (openSUSE-2015-446)
2015-06-25 00:00:00
Fedora 22 : curl-7.40.0-5.fc22 (2015-10155)
2015-06-25 00:00:00
Amazon Linux AMI : curl (ALAS-2015-551)
2015-06-22 00:00:00
amazon
amazon
Medium: curl
2015-06-18 20:48:00
fedora
fedora
[SECURITY] Fedora 22 Update: curl-7.40.0-5.fc22
2015-06-24 15:59:29
freebsd
freebsd
cURL -- Multiple Vulnerability
2015-06-17 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0263)
2015-10-15 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-551)
2015-09-08 00:00:00
Fedora Update for curl FEDORA-2015-10155
2015-07-07 00:00:00
kaspersky
kaspersky
KLA10618 Information disclosure vulnerability in cURL
2015-06-22 00:00:00
mageia
mageia
Updated curl package fixes security vulnerability
2015-07-05 20:22:03
archlinux
archlinux
curl: information leakage
2015-06-22 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package curl version 7.43.0-alt1
2015-06-19 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in libcurl and cURL affect Rational DOORS (CVE-2015-3143, CVE-2015-3144, CVE-2015-3145, CVE-2015-3148, CVE-2015-3153, CVE-2015-3236)
2020-05-01 08:19:24
gentoo
gentoo
cURL: Multiple vulnerabilities
2015-09-24 00:00:00
slackware
slackware
[slackware-security] curl
2015-10-29 22:48:27
securityvulns
securityvulns
cURL security vulnerabilitiies
2015-11-01 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
Oracle Critical Patch Update - July 2016
2016-07-19 00:00:00
Oracle Critical Patch Update - October 2018
2018-12-18 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.0%

JSON
Related for NVD:CVE-2015-3236
cvelist1debiancve1cve1ubuntucve1prion1nessus6amazon1fedora1freebsd1openvas5kaspersky1mageia1archlinux1altlinux1ibm1gentoo1slackware1securityvulns1oracle4