---

CVE-2016-8616 - log back

CVE-2016-8616 created at 25 Sep 2019 19:31:40
Severity	+ Low
Remote	+ Remote
Type	+ Authentication bypass
Description	+ When re-using a connection, curl was doing case insensitive comparisons of user name and password with the existing connections. + + This means that if an unused connection with proper credentials exists for a protocol that has connection-scoped credentials, an attacker can cause that connection to be reused if s/he knows the case-insensitive version of the correct password.
References	+ https://curl.haxx.se/docs/adv_20161102B.html
Notes