Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2024-11053

LOW · 3.4 CVSS Gepubliceerd:

Beschrijving

When asked to both use a `.netrc` file for credentials and to follow HTTP
redirects, curl could leak the password used for the first host to the
followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches
the redirect target hostname but the entry either omits just the password or
omits both login and password.

Vendors

Haxx Netapp

Affected products

Curl Ontap Ontap Select Deploy Administration Utility H610c Firmware H610c H610s Firmware H610s H615c Firmware H615c H700s Firmware H700s Bootstrap Os Hci Compute Node H300s Firmware H300s H410s Firmware H410s H500s Firmware H500s

References