Description (CNA)
When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| curl / curl | affected 8.22.0 through 8.22.0; affected 8.21.0 through 8.21.0 |
CWE
No CWE identifiers supplied.