[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4hdL7TGc67ubYgNkX0yUqQtjqtK3D40OTGDE7qV5oAM":3,"g5a-risk:CVE-2023-27535":262},{"success":4,"data":5,"meta":259},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":35,"epssPercentile":26,"epssTimeSeries":36,"severity":38,"affectedProducts":39,"affectedProductsCount":95,"references":96,"referencesCount":130,"weaknesses":131,"weaknessesCount":145,"isActivelyExploited":69,"cisaInfo":26,"otxData":26,"relatedBlogPosts":146,"seoMetadata":147,"configurations":172,"relatedVendorCves":257,"notableEvents":258},"CVE-2023-27535","What is CVE-2023-27535?","An authentication bypass vulnerability exists in libcurl \u003C8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.","An authentication bypass vulnerability exists in libcurl \u003C8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during su...","2023-03-30T20:15:07.483","2025-06-09T15:15:28.903",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],0.01803,[37,37,37,37,35,35,35],0.01607,"Medium",[40,45,50,55,60,63,66,70,73,76,79,82,85,88,92],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"haxx","libcurl","*","cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"fedoraproject","fedora","36","cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"netapp","active_iq_unified_manager","-","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",{"vendor":56,"product":61,"version":58,"criteria":62,"vulnerable":4},"ontap_9","cpe:2.3:a:netapp:ontap_9:-:*:*:*:*:*:*:*",{"vendor":56,"product":64,"version":58,"criteria":65,"vulnerable":4},"h300s_firmware","cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",{"vendor":56,"product":67,"version":58,"criteria":68,"vulnerable":69},"h300s","cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",false,{"vendor":56,"product":71,"version":58,"criteria":72,"vulnerable":4},"h500s_firmware","cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",{"vendor":56,"product":74,"version":58,"criteria":75,"vulnerable":69},"h500s","cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",{"vendor":56,"product":77,"version":58,"criteria":78,"vulnerable":4},"h700s_firmware","cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",{"vendor":56,"product":80,"version":58,"criteria":81,"vulnerable":69},"h700s","cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",{"vendor":56,"product":83,"version":58,"criteria":84,"vulnerable":4},"h410s_firmware","cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",{"vendor":56,"product":86,"version":58,"criteria":87,"vulnerable":69},"h410s","cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",{"vendor":89,"product":90,"version":43,"criteria":91,"vulnerable":4},"splunk","universal_forwarder","cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",{"vendor":89,"product":90,"version":93,"criteria":94,"vulnerable":4},"9.1.0","cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*",15,[97,103,108,112,116,120,122,124,126,128],{"url":98,"source":99,"tags":100},"https:\u002F\u002Fhackerone.com\u002Freports\u002F1892780","Hackerone",[101,102],"Exploit","Third Party Advisory",{"url":104,"source":105,"tags":106},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F04\u002Fmsg00025.html","Debian",[107,102],"Mailing List",{"url":109,"source":110,"tags":111},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW\u002F","Fedoraproject",[107,102],{"url":113,"source":114,"tags":115},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202310-12","Gentoo",[102],{"url":117,"source":118,"tags":119},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20230420-0010\u002F","Netapp",[102],{"url":98,"source":99,"tags":121},[101,102],{"url":104,"source":105,"tags":123},[107,102],{"url":109,"source":110,"tags":125},[107,102],{"url":113,"source":114,"tags":127},[102],{"url":117,"source":118,"tags":129},[102],10,[132,140],{"id":133,"name":134,"description":135,"extendedDescription":136,"status":137,"abstraction":138,"structure":139},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"id":141,"name":142,"description":143,"extendedDescription":136,"status":137,"abstraction":144,"structure":139},"CWE-305","Authentication Bypass by Primary Weakness","The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.","Base",2,[],{"title":148,"metaDescription":149,"keywords":150,"canonicalUrl":151,"structuredData":152},"What is CVE-2023-27535? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-27535, a medium severity cyber security vulnerability from 2023. An authentication bypass vulnerability exists in libcurl ...","CVE-2023-27535, CVE-2023-27535 vulnerability, CVE-2023-27535 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, haxx security, fedoraproject security, debian security, netapp security, libcurl vulnerability, fedora vulnerability, debian_linux vulnerability, active_iq_unified_manager vulnerability","\u002Fwhat-is\u002Fcve-2023-27535",{"@context":153,"@type":154,"headline":148,"description":149,"datePublished":10,"dateModified":11,"author":155,"publisher":159,"about":163,"mainEntityOfPage":167,"articleSection":170,"keywords":171},"https:\u002F\u002Fschema.org","TechArticle",{"@type":156,"name":157,"url":158},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":156,"name":157,"url":158,"logo":160},{"@type":161,"url":162},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":164,"name":6,"description":165,"additionalType":166},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":168,"@id":169},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-27535","Cybersecurity","CVE-2023-27535, CVE-2023-27535 vulnerability, CVE-2023-27535 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[173,182,188,194,202,213,223,233,243],{"Operator":26,"Negate":26,"Nodes":174},[175],{"Operator":176,"Negate":69,"CPEMatch":177},"OR",[178],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":179,"VersionStartExcluding":26,"VersionStartIncluding":180,"VersionEndExcluding":26,"VersionEndIncluding":181},"9C599258-A578-454A-BB51-AC2B5C4BE0A8","7.13.0","7.88.1",{"Operator":26,"Negate":26,"Nodes":183},[184],{"Operator":176,"Negate":69,"CPEMatch":185},[186],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":187,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",{"Operator":26,"Negate":26,"Nodes":189},[190],{"Operator":176,"Negate":69,"CPEMatch":191},[192],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":193,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Operator":26,"Negate":26,"Nodes":195},[196],{"Operator":176,"Negate":69,"CPEMatch":197},[198,200],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":199,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":201,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AD886814-B4A0-4764-9F08-2060601D8E89",{"Operator":203,"Negate":26,"Nodes":204},"AND",[205,209],{"Operator":176,"Negate":69,"CPEMatch":206},[207],{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":208,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6770B6C3-732E-4E22-BF1C-2D2FD610061C",{"Operator":176,"Negate":69,"CPEMatch":210},[211],{"Vulnerable":69,"Criteria":68,"MatchCriteriaID":212,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9F9C8C20-42EB-4AB5-BD97-212DEB070C43",{"Operator":203,"Negate":26,"Nodes":214},[215,219],{"Operator":176,"Negate":69,"CPEMatch":216},[217],{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":218,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7FFF7106-ED78-49BA-9EC5-B889E3685D53",{"Operator":176,"Negate":69,"CPEMatch":220},[221],{"Vulnerable":69,"Criteria":75,"MatchCriteriaID":222,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9",{"Operator":203,"Negate":26,"Nodes":224},[225,229],{"Operator":176,"Negate":69,"CPEMatch":226},[227],{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":228,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"56409CEC-5A1E-4450-AA42-641E459CC2AF",{"Operator":176,"Negate":69,"CPEMatch":230},[231],{"Vulnerable":69,"Criteria":81,"MatchCriteriaID":232,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B06F4839-D16A-4A61-9BB5-55B13F41E47F",{"Operator":203,"Negate":26,"Nodes":234},[235,239],{"Operator":176,"Negate":69,"CPEMatch":236},[237],{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":238,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D0B4AD8A-F172-4558-AEC6-FF424BA2D912",{"Operator":176,"Negate":69,"CPEMatch":240},[241],{"Vulnerable":69,"Criteria":87,"MatchCriteriaID":242,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8497A4C9-8474-4A62-8331-3FE862ED4098",{"Operator":26,"Negate":26,"Nodes":244},[245],{"Operator":176,"Negate":69,"CPEMatch":246},[247,251,255],{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":248,"VersionStartExcluding":26,"VersionStartIncluding":249,"VersionEndExcluding":250,"VersionEndIncluding":26},"5722E753-75DE-4944-A11B-556CB299B57D","8.2.0","8.2.12",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":252,"VersionStartExcluding":26,"VersionStartIncluding":253,"VersionEndExcluding":254,"VersionEndIncluding":26},"DC0F9351-81A4-4FEA-B6B5-6E960A933D32","9.0.0","9.0.6",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":256,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC",[],[],{"lastModified":11,"cacheTime":260,"version":261},1792344824700,"2.0",{"score":263,"band":38,"action":264,"scoredAt":265},44,"Plan remediation","2026-10-16T06:57:36.102326+00:00"]