CVE-2003-1605

25

FAUCET Score

CVE-2003-1605 describes a vulnerability in curl versions 7.x prior to 7.10.7, where CONNECT proxy credentials are inadvertently sent to the remote server, potentially exposing sensitive information. This vulnerability carries a CVSS v3 score of 7.5 (HIGH), indicating a network-based attack with low complexity and a high impact on confidentiality. Despite its age and high severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 7.1.0, < 7.10.7CPE matchmatch criteria	cpe:2.3:a:haxx:curl::::::::

CVSS Data

CVSS version used by this source: 3.0

7.5HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

Exploitability Score

3.9

Impact Score

3.6

CvssVersion

3.0

Exploit Intelligence

EPSS Score

1.92%

Probability of exploitation in next 30 days

EPSS Percentile

77.7%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0192 is in the 61st percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (6)

caddypatch availablevia llm_extracted

Fixed in: 7.10.6

commvaultpatch availablevia llm_extracted

Fixed in: 7.10.6

intelpatch availablevia llm_extracted

Fixed in: 7.10.6

jfrogpatch availablevia llm_extracted

Fixed in: 7.10.6

opentsdbpatch availablevia llm_extracted

Fixed in: 7.10.6

rubypatch availablevia llm_extracted

Fixed in: 7.10.6

Vendor Advisories (6)

rubyllm-ruby-419d19c3e8cf85d6HIGH

Proxy Authentication Header Information Leakage

jfrogllm-jfrog-346b83d7485e61dbHIGH

CVE-2003-1605: Proxy Authentication Header Information Leakage

intelllm-intel-4cc4d51ed7663930HIGH

CVE-2003-1605: Proxy Authentication Header Information Leakage

caddyllm-caddy-2c51a0f74e05a38bHIGH

CVE-2003-1605: Proxy Authentication Header Information Leakage

commvaultllm-commvault-efd2aade47ce1a88HIGH

CVE-2003-1605: Proxy Authentication Header Information Leakage

opentsdbllm-opentsdb-2f154953b7cfb823HIGH

CVE-2003-1605: Proxy Authentication Header Information Leakage

References

curl.haxx.se / docs/CVE-2003-1605.html

Vendor Advisory

securityfocus.com / bid/8432

Third Party AdvisoryVDB Entry