SB2018071926 - IBM Integrated Management Module II (IMM2) update for cURL/libcURL
Published: July 19, 2018 Updated: February 11, 2026
Security Bulletin ID
SB2018071926
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper Authentication (CVE-ID: CVE-2016-7141)
The vulnerability allows a remote non-authenticated attacker to manipulate data.
curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.
Remediation
Install update from vendor's website.