Yüksek CVSS 7.5 PoC var
CVE-2020-8169: Curl: hassas bilgi ifşası
Açıklama (NVD)
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
Özet bilgiler
- Ürün
- Haxx Curl
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- %3,93 (yüzdelik 90)
- CWE
- CWE-200
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| haxx-curl | 7.62.0 | 7.70.0 | — |
| siemens-simatic-tim-1531-irc-firmware | — | — | 2.2 |
| debian-debian-linux | 10.0 | 10.0 | — |
| siemens-sinec-infrastructure-network-services | — | — | 1.0.1.1 |
| splunk-universal-forwarder | 8.2.0 | — | 8.2.12 |
| splunk-universal-forwarder | 9.0.0 | — | 9.0.6 |
| splunk-universal-forwarder | 9.1.0 | 9.1.0 | — |