3.4

CVE-2024-11053

Exploit

When asked to both use a `.netrc` file for credentials and to follow HTTP
redirects, curl could leak the password used for the first host to the
followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches
the redirect target hostname but the entry either omits just the password or
omits both login and password.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Data is provided by the National Vulnerability Database (NVD)
Haxx ≫ Curl Version >= 7.76.0 < 8.11.1
Netapp ≫ Ontap Version9
Netapp ≫ H610c Firmware Version-
   Netapp ≫ H610c Version-
Netapp ≫ H610s Firmware Version-
   Netapp ≫ H610s Version-
Netapp ≫ H615c Firmware Version-
   Netapp ≫ H615c Version-
Netapp ≫ H700s Firmware Version-
   Netapp ≫ H700s Version-
Netapp ≫ Bootstrap Os Version-
   Netapp ≫ Hci Compute Node Version-
Netapp ≫ H300s Firmware Version-
   Netapp ≫ H300s Version-
Netapp ≫ H410s Firmware Version-
   Netapp ≫ H410s Version-
Netapp ≫ H500s Firmware Version-
   Netapp ≫ H500s Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.29% 0.519
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0 3.4 1.6 1.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
https://hackerone.com/reports/2829063
Third Party Advisory
Exploit
Issue Tracking