Detections
Analytics

Echo: curl-7.69.1: security update to 7.69.1+e2

low Tenable Cloud Security Plugin ID 478555

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a
 connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl
 can confuse session tickets arriving from the HTTPS proxy but work as if they arrived from the remote
 server and then wrongly "short-cut" the host handshake. When confusing the tickets, a HTTPS proxy can
 trick libcurl to use the wrong session ticket resume for the host and thereby circumvent the server TLS
 certificate check and make a MITM attack to be possible to perform unnoticed. Note that such a malicious
 HTTPS proxy needs to provide a certificate that curl will accept for the MITMed server for an attack to
 work - unless curl has been told to ignore the server certificate check. (CVE-2021-22890)

Solution

Update the curl-7.69.1 library and its related packages to version 7.69.1+e2 or later.

See Also

https://advisory.echohq.com/cve/CVE-2021-22890

Plugin Details

Severity: Low

ID: 478555

Version: Revision 1.1

Type: Local

Published: 11/5/2026

Updated: 11/5/2026

Risk Information

VPR

Risk Factor: Low

Score: 1.2

Percentile: 0.01

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.4

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS Score Source: CVE-2021-22890

CVSS v3

Risk Factor: Low

Base Score: 3.7

Temporal Score: 3.4

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/5/2026

Vulnerability Publication Date: 4/1/2021

Reference Information

CVE: CVE-2021-22890