curl: information leak
| Package(s): | curl | CVE #(s): | CVE-2015-3153 | ||||||||||||||||
| Created: | April 30, 2015 | Updated: | May 28, 2015 | ||||||||||||||||
| Description: | From the Debian advisory:
It was discovered that cURL, an URL transfer library, if configured to use a proxy server with the HTTPS protocol, by default could send to the proxy the same HTTP headers it sends to the destination server, possibly leaking sensitive information. | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||