| Package | Affected versions | Patched versions |
|---|---|---|
| elinks | = 0.12 |
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free