[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBvopxCIyitsymHBOepRScm7vDV1gQIjRU0dqsn8rmiw":3,"g5a-risk:CVE-2023-27536":265},{"success":4,"data":5,"meta":262},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":36,"affectedProducts":37,"affectedProductsCount":93,"references":94,"referencesCount":128,"weaknesses":129,"weaknessesCount":143,"isActivelyExploited":144,"cisaInfo":26,"otxData":26,"relatedBlogPosts":145,"seoMetadata":146,"configurations":171,"relatedVendorCves":260,"notableEvents":261},"CVE-2023-27536","What is CVE-2023-27536?","An authentication bypass vulnerability exists libcurl \u003C8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5\u002Fkerberos\u002Fnegotiate\u002FGSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.","An authentication bypass vulnerability exists libcurl \u003C8.0.0 in the connection reuse feature which can reuse previously established connections with incorrec...","2023-03-30T20:15:07.547","2025-02-14T16:15:33.497",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.01758,[35,35,35,35,33,33,33],0.01566,"Medium",[38,43,48,53,58,61,64,67,70,73,76,79,82,86,90],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"haxx","libcurl","*","cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"fedoraproject","fedora","36","cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"netapp","active_iq_unified_manager","-","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",{"vendor":54,"product":59,"version":56,"criteria":60,"vulnerable":4},"h300s_firmware","cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",{"vendor":54,"product":62,"version":56,"criteria":63,"vulnerable":4},"h300s","cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",{"vendor":54,"product":65,"version":56,"criteria":66,"vulnerable":4},"h500s_firmware","cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",{"vendor":54,"product":68,"version":56,"criteria":69,"vulnerable":4},"h500s","cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",{"vendor":54,"product":71,"version":56,"criteria":72,"vulnerable":4},"h700s_firmware","cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",{"vendor":54,"product":74,"version":56,"criteria":75,"vulnerable":4},"h700s","cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",{"vendor":54,"product":77,"version":56,"criteria":78,"vulnerable":4},"h410s_firmware","cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",{"vendor":54,"product":80,"version":56,"criteria":81,"vulnerable":4},"h410s","cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",{"vendor":54,"product":83,"version":84,"criteria":85,"vulnerable":4},"ontap","9","cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*",{"vendor":87,"product":88,"version":41,"criteria":89,"vulnerable":4},"splunk","universal_forwarder","cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",{"vendor":87,"product":88,"version":91,"criteria":92,"vulnerable":4},"9.1.0","cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*",15,[95,101,106,110,114,118,120,122,124,126],{"url":96,"source":97,"tags":98},"https:\u002F\u002Fhackerone.com\u002Freports\u002F1895135","Hackerone",[99,100],"Exploit","Third Party Advisory",{"url":102,"source":103,"tags":104},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F04\u002Fmsg00025.html","Debian",[105,100],"Mailing List",{"url":107,"source":108,"tags":109},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW\u002F","Fedoraproject",[105,100],{"url":111,"source":112,"tags":113},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202310-12","Gentoo",[100],{"url":115,"source":116,"tags":117},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20230420-0010\u002F","Netapp",[100],{"url":96,"source":97,"tags":119},[99,100],{"url":102,"source":103,"tags":121},[105,100],{"url":107,"source":108,"tags":123},[105,100],{"url":111,"source":112,"tags":125},[100],{"url":115,"source":116,"tags":127},[100],10,[130,138],{"id":131,"name":132,"description":133,"extendedDescription":134,"status":135,"abstraction":136,"structure":137},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"id":139,"name":140,"description":141,"extendedDescription":134,"status":135,"abstraction":142,"structure":137},"CWE-305","Authentication Bypass by Primary Weakness","The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.","Base",2,false,[],{"title":147,"metaDescription":148,"keywords":149,"canonicalUrl":150,"structuredData":151},"What is CVE-2023-27536? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-27536, a medium severity cyber security vulnerability from 2023. An authentication bypass vulnerability exists libcurl \u003C8....","CVE-2023-27536, CVE-2023-27536 vulnerability, CVE-2023-27536 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, haxx security, fedoraproject security, debian security, netapp security, libcurl vulnerability, fedora vulnerability, debian_linux vulnerability, active_iq_unified_manager vulnerability","\u002Fwhat-is\u002Fcve-2023-27536",{"@context":152,"@type":153,"headline":147,"description":148,"datePublished":10,"dateModified":11,"author":154,"publisher":158,"about":162,"mainEntityOfPage":166,"articleSection":169,"keywords":170},"https:\u002F\u002Fschema.org","TechArticle",{"@type":155,"name":156,"url":157},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":155,"name":156,"url":157,"logo":159},{"@type":160,"url":161},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":163,"name":6,"description":164,"additionalType":165},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":167,"@id":168},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-27536","Cybersecurity","CVE-2023-27536, CVE-2023-27536 vulnerability, CVE-2023-27536 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[172,181,187,193,199,210,220,230,240,246],{"Operator":26,"Negate":26,"Nodes":173},[174],{"Operator":175,"Negate":26,"CPEMatch":176},"OR",[177],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":178,"VersionStartExcluding":26,"VersionStartIncluding":179,"VersionEndExcluding":26,"VersionEndIncluding":180},"1FD7CD4C-BF3D-41DD-AC3F-005FB087CE0A","7.22.0","7.88.1",{"Operator":26,"Negate":26,"Nodes":182},[183],{"Operator":175,"Negate":26,"CPEMatch":184},[185],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":186,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",{"Operator":26,"Negate":26,"Nodes":188},[189],{"Operator":175,"Negate":26,"CPEMatch":190},[191],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":192,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Operator":26,"Negate":26,"Nodes":194},[195],{"Operator":175,"Negate":26,"CPEMatch":196},[197],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":198,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5",{"Operator":200,"Negate":26,"Nodes":201},"AND",[202,206],{"Operator":175,"Negate":26,"CPEMatch":203},[204],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":205,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6770B6C3-732E-4E22-BF1C-2D2FD610061C",{"Operator":175,"Negate":26,"CPEMatch":207},[208],{"Vulnerable":26,"Criteria":63,"MatchCriteriaID":209,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9F9C8C20-42EB-4AB5-BD97-212DEB070C43",{"Operator":200,"Negate":26,"Nodes":211},[212,216],{"Operator":175,"Negate":26,"CPEMatch":213},[214],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":215,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7FFF7106-ED78-49BA-9EC5-B889E3685D53",{"Operator":175,"Negate":26,"CPEMatch":217},[218],{"Vulnerable":26,"Criteria":69,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9",{"Operator":200,"Negate":26,"Nodes":221},[222,226],{"Operator":175,"Negate":26,"CPEMatch":223},[224],{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":225,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"56409CEC-5A1E-4450-AA42-641E459CC2AF",{"Operator":175,"Negate":26,"CPEMatch":227},[228],{"Vulnerable":26,"Criteria":75,"MatchCriteriaID":229,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B06F4839-D16A-4A61-9BB5-55B13F41E47F",{"Operator":200,"Negate":26,"Nodes":231},[232,236],{"Operator":175,"Negate":26,"CPEMatch":233},[234],{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":235,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D0B4AD8A-F172-4558-AEC6-FF424BA2D912",{"Operator":175,"Negate":26,"CPEMatch":237},[238],{"Vulnerable":26,"Criteria":81,"MatchCriteriaID":239,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8497A4C9-8474-4A62-8331-3FE862ED4098",{"Operator":26,"Negate":26,"Nodes":241},[242],{"Operator":175,"Negate":26,"CPEMatch":243},[244],{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":245,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A20333EE-4C13-426E-8B54-D78679D5DDB8",{"Operator":26,"Negate":26,"Nodes":247},[248],{"Operator":175,"Negate":26,"CPEMatch":249},[250,254,258],{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":251,"VersionStartExcluding":26,"VersionStartIncluding":252,"VersionEndExcluding":253,"VersionEndIncluding":26},"5722E753-75DE-4944-A11B-556CB299B57D","8.2.0","8.2.12",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":255,"VersionStartExcluding":26,"VersionStartIncluding":256,"VersionEndExcluding":257,"VersionEndIncluding":26},"DC0F9351-81A4-4FEA-B6B5-6E960A933D32","9.0.0","9.0.6",{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":259,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC",[],[],{"lastModified":11,"cacheTime":263,"version":264},1792368554178,"2.0",{"score":266,"band":36,"action":267,"scoredAt":268},44,"Plan remediation","2026-10-16T06:57:36.102592+00:00"]