VulnerabilityAnalyzed
CVE-2025-0167
When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.
LOW 3.4EPSS 0.69%
Does this matter?
Lower severity and a low EPSS score (0.69%). Track it; it rarely justifies an emergency change on its own.
Description
When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance.
- CVSS 3.1
- 3.4 LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
- EPSS
- 0.69% probability · 51th percentile
- CISA KEV
- Not listed
- Affected
- haxx/curl · netapp/h700s firmware · netapp/h615c firmware · netapp/h610s firmware · netapp/h610c firmware · netapp/h500s firmware · netapp/h410s firmware · netapp/h410c firmware · netapp/h300s firmware · netapp/bootstrap os · netapp/element software · netapp/ontap · netapp/ontap select deploy administration utility · netapp/ontap tools · netapp/solidfire \& hci management node · netapp/solidfire \& hci storage node
- Source
- 2499f714-1537-4658-8207-48ae4bb9eae9
References
- https://curl.se/docs/CVE-2025-0167.htmlVendor Advisory
- https://curl.se/docs/CVE-2025-0167.jsonVendor Advisory
- https://hackerone.com/reports/2917232Exploit, Issue Tracking, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20250306-0008/Third Party Advisory
- https://curl.se/docs/CVE-2025-0167.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.