Lucene search
Veracode Vulnerability DatabaseVERACODE:34127HistoryFeb 10, 2022 - 5:03 a.m.
Information Disclosure
2022-02-1005:03:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
0.001 Low
EPSS
Percentile
48.8%
follow-redirects is vulnerable to information disclosure. The vulnerability exists because the HTTP Authorization header is sent via an insecure HTTP channel when a same-hostname HTTPS-to-HTTP redirect is received, allowing attackers in the same network to discover credentials by sniffing the network traffic.
Related
redhatcve
redhatcve
CVE-2022-0536
2022-02-10 19:47:22
debiancve
debiancve
CVE-2022-0536
2022-02-09 11:15:08
ibm
ibm
osv
osv
CVE-2022-0536
2022-02-09 11:15:08
prion
prion
Input validation
2022-02-09 11:15:00
cvelist
cvelist
cve
cve
CVE-2022-0536
2022-02-09 11:15:08
github
github
ubuntucve
ubuntucve
CVE-2022-0536
2022-02-09 00:00:00
nvd
nvd
CVE-2022-0536
2022-02-09 11:15:08
huntr
huntr
nessus
nessus
RHEL 8 : odo (Unpatched Vulnerability)
2024-06-03 00:00:00
redhat
redhat