CVE-2023-27535
MEDIUM
MEDIUM
Priority: 0.11
BB Relevance:
62/100
Published: 2023-03-30
Modified: 2026-10-24
First seen: 2026-10-29
Status: active
Attack Surface
Network
No Auth
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
None
A:
None
Description
An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.
Affected Software (12)
| Vendor | Product | Version |
|---|---|---|
| debian | debian_linux | 10.0 |
| fedoraproject | fedora | 36 |
| haxx | libcurl | 7.13.0 – 7.88.1 |
| netapp | active_iq_unified_manager | - |
| netapp | h300s_firmware | - |
| netapp | h410s_firmware | - |
| netapp | h500s_firmware | - |
| netapp | h700s_firmware | - |
| netapp | ontap_9 | - |
| splunk | universal_forwarder | 8.2.0 – 8.2.12 |
| splunk | universal_forwarder | 9.0.0 – 9.0.6 |
| splunk | universal_forwarder | 9.1.0 |
References & Advisories (8)
Third Party Advisory
Third Party Advisory
Mailing List
Third Party Advisory
Mailing List
Third Party Advisory
Exploit
Third Party Advisory