libcurl CVE-2020-06411: FTP Connection Reuse Inheriting Client Certificates

Vulnerability Overview Vulnerability ID: CVE-2020-06411 Vulnerability Type: FTP Connection Reuse Inheriting Client Certificate Vulnerability Description: An that was previously authenticated via can be reused when is configured to . The second handle neither performs a new TLS handshake nor a new FTP login; consequently, the server continues to authorize the certificate identity of the first handle. Severity: Low Release Date: 2020-10-14T00:00:00.002Z Scope of Impact Affected Versions: All versions Affected Software: - Software Name: libcurl - Software Version: 8.21.0 - Software Type: Library Remediation Fixed Version: 8.22.0 Fix Date: 2020-10-14T00:00:00.002Z Fix Link: https://github.com/curl/curl.git Fix Commit: Contributors Stamatis Fort (Aisite Research): Discoverer Stefan Eissing: Reporter Vulnerability Details Vulnerability Identifier: CWE-488 Vulnerability Description: Exposure of Data Elements to a Wrong Session Vulnerability Impact: Data Leakage Vulnerability Links Vulnerability Detail Page: https://nvd.nist.gov/vuln/detail/CVE-2020-06411 Vulnerability Report Page: https://curl.se/cve/CVE-2020-06411.html Vulnerability Database Page: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-06411 Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/commit/4f7212f6e82b902a9a4d0642f700160905 Vulnerability Fix Version Fixed Version: 8.22.0 Vulnerability Fix Time Fix Date: 2020-10-14T00:00:00.002Z Vulnerability Fix Links Fix Commit Link: https://github.com/curl/curl/co

Goal Reached Thanks to every supporter — we hit 100%!

libcurl CVE-2020-06411: FTP Connection Reuse Inheriting Client Certificates