CVE-2012-4545

CVE-2012-4545 describes a vulnerability in ELinks 0.12 before 0.12pre6, specifically within the http_negotiate_create_context function, which affects the handling of HTTP Negotiate or GSS-Negotiate authentication. This flaw allows remote servers to authenticate as the client by leveraging delegated user credentials through GSSAPI. The vulnerability carries a CVSS score of 5.1, indicating a medium severity. It can be exploited remotely with high attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor is there any publicly available exploit code in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community attention, with no social media discussion or media coverage.