| Package | Affected versions | Patched versions |
|---|---|---|
| curl | ≤ 7.46.0 |
The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free