Sensitive information sent insecurely In curl
Description
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel8 | - | - | |
rpm rhel9 | - | - | |
rpm rhel10 | - | - | |
rpm rhel10 | - | - | |
rpm rhel6 | - | - | |
rpm rhel7 | - | - | |
rpm rhel9 | - | - | |
rpm rhel10 | - | - | |
rpm rhel10 | - | - | |
rpm rhel10 | - | - |
1-10 of 17
10
Aliases
1. 2. 3. 4. 5.