CVE-2023-23915

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-23915
A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://hackerone.com/reports/1826048 Not Applicable
https://security.gentoo.org/glsa/202310-12 Third Party Advisory
https://security.netapp.com/advisory/ntap-20230309-0006/ Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:a:netapp:clustered_data_ontap:9.0:-:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Configuration 7 (hide)

OR cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*
cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*
cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*
History

27 Mar 2024, 14:55

Type Values Removed Values Added
First Time Splunk universal Forwarder
Splunk
CPE cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*
cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*

09 Mar 2023, 19:15

Type Values Removed Values Added
References
  • {'url': 'https://hackerone.com/reports/1874716', 'name': 'https://hackerone.com/reports/1874716', 'tags': ['Exploit', 'Issue Tracking'], 'refsource': 'MISC'}
  • (CONFIRM) https://security.netapp.com/advisory/ntap-20230309-0006/ -

03 Mar 2023, 16:10

Type Values Removed Values Added
CPE cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*
CWE CWE-319
References
  • (MISC) https://hackerone.com/reports/1874716 - Exploit, Issue Tracking
References (MISC) https://hackerone.com/reports/1826048 - (MISC) https://hackerone.com/reports/1826048 - Not Applicable
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5

23 Feb 2023, 22:58

Type Values Removed Values Added
New CVE
Information

Published : 2023-02-23 20:15

Updated : 2024-03-27 14:55

NVD link : CVE-2023-23915

Mitre link : CVE-2023-23915

CVE.ORG link : CVE-2023-23915

JSON object : View

Products Affected

netapp

  • h300s
  • h700s
  • clustered_data_ontap
  • h300s_firmware
  • h500s
  • h700s_firmware
  • active_iq_unified_manager
  • h410s_firmware
  • h500s_firmware
  • h410s

haxx

  • curl

splunk

  • universal_forwarder
CWE
CWE-319

Cleartext Transmission of Sensitive Information