CVE-2024-11053

Katalog CVE

CVSS 3.4 · Low EPSS 1,3%

Kerentanan pada haxx curl, netapp ontap +9 lainnya. Skor CVSS 3.1 3.4 (Low) menurut CISA ADP.

Deskripsi (NVD)

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Rincian

Terbit di NVD

11 Desember 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.4 (Low), sumber CISA ADP
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://curl.se/docs/CVE-2024-11053.html advisory vendor
• https://curl.se/docs/CVE-2024-11053.json advisory vendor
• https://hackerone.com/reports/2829063 exploit · issue tracking · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2024/12/11/1 mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20250124-0012/ advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20250131-0003/ advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20250131-0004/