CVE-2025-0167

Katalog CVE

CVSS 3.4 · Low EPSS 0,69%

Kerentanan pada haxx curl, netapp h700s firmware +14 lainnya. Skor CVSS 3.1 3.4 (Low) menurut CISA ADP.

Deskripsi (NVD)

When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance.

Rincian

Terbit di NVD

5 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.4 (Low), sumber CISA ADP
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

0,69% peluang dieksploitasi; lebih tinggi dari 51,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://curl.se/docs/CVE-2025-0167.html advisory vendor
• https://curl.se/docs/CVE-2025-0167.json advisory vendor
• https://hackerone.com/reports/2917232 exploit · issue tracking · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20250306-0008/ advisory pihak ketiga