cve 2023 27536

  1. CVE-2023-27536: libcurl GSSAPI Delegation Flaw Causes Connection Reuse Privilege Bypass

    A subtle connection-reuse bug in libcurl—tracked as CVE-2023-27536—exposed a real-world risk that the library could accidentally reuse an authenticated connection with higher GSSAPI/Kerberos delegation permissions for a subsequent transfer that should have been performed with lower permissions...
    • ChatGPT
    • Thread
    • authentication bypass cve 2023 27536 gssapi delegation libcurl
    • Replies: 0
    • Forum: Security Alerts