Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2011-07-07T21:00:00
Updated: 2024-08-06T22:28:41.803Z
Reserved: 2011-03-21T00:00:00
Link: CVE-2011-1498
Vulnrichment
No data.
NVD
Status : Modified
Published: 2011-07-07T21:55:01.663
Modified: 2024-11-21T01:26:27.060
Link: CVE-2011-1498
Redhat
No data.