Lucene search
Veracode Vulnerability DatabaseVERACODE:36442HistoryJul 22, 2022 - 5:05 p.m.
Information Disclosure
2022-07-2217:05:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
go
vulnerability
reverseproxy
information disclosure
security mechanism
EPSS
0.002
Percentile
52.0%
go is vulnerable to information disclosure. The vulnerability exists in httputil.ReverseProxy.ServeHTTP with a Request.Header map containing nil value for the X-Forwarded-For header which allows to remote attacker to bypass security mechanism and access the sensitive information
References
go.dev/cl/412857
go.dev/issue/53423
go.googlesource.com/go/+/b2cc0fecc2ccd80e6d5d16542cc684f97b3a9c8a
groups.google.com/g/golang-announce/c/nqrv9fbR0zE
lists.fedoraproject.org/archives/list/[email protected]/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/
pkg.go.dev/vuln/GO-2022-0520
secdb.alpinelinux.org/edge/community.yaml
secdb.alpinelinux.org/v3.16/community.yaml
Related
redhatcve
redhatcve
CVE-2022-32148
2022-07-15 10:33:07
ubuntucve
ubuntucve
CVE-2022-32148
2022-08-10 00:00:00
prion
prion
Design/Logic Flaw
2022-08-10 20:15:00
cve
cve
CVE-2022-32148
2022-08-10 20:15:47
debiancve
debiancve
CVE-2022-32148
2022-08-10 20:15:47
alpinelinux
alpinelinux
CVE-2022-32148
2022-08-10 20:15:47
cbl_mariner
cbl_mariner
CVE-2022-32148 affecting package golang for versions less than 1.18.5-1
2022-09-16 06:05:39
CVE-2022-32148 affecting package golang 1.18.3-1
2022-09-17 05:56:44
ibm
ibm
osv
osv
Exposure of client IP addresses in net/http
2022-07-28 17:23:05
BIT-golang-2022-32148
2024-03-06 10:59:14
CVE-2022-32148
2022-08-10 20:15:47
cvelist
cvelist
CVE-2022-32148 Exposure of client IP addresses in net/http
2022-08-09 20:18:21
nvd
nvd
CVE-2022-32148
2022-08-10 20:15:47
nessus
nessus
RHEL 9 : odo (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 8 : odo (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 8 : OpenShift Container Platform 4.11.17 packages and (RHSA-2022:8626)
2023-01-23 00:00:00
redhat
redhat
(RHSA-2022:8626) Moderate: OpenShift Container Platform 4.11.17 packages and security update
2022-11-28 20:39:41
(RHSA-2022:8250) Moderate: grafana-pcp security update
2022-11-15 06:19:30
(RHSA-2022:7648) Moderate: grafana-pcp security update
2022-11-08 06:25:29
rocky
rocky
grafana-pcp security update
2022-11-15 06:19:30
grafana-pcp security update
2022-11-08 06:25:29
git-lfs security and bug fix update
2022-10-25 07:32:51
oraclelinux
oraclelinux
grafana-pcp security update
2022-11-15 00:00:00
grafana-pcp security update
2022-11-22 00:00:00
go-toolset:ol8 security and bug fix update
2022-08-03 00:00:00
almalinux
almalinux
Moderate: grafana-pcp security update
2022-11-08 00:00:00
Moderate: grafana-pcp security update
2022-11-15 00:00:00
Important: go-toolset and golang security and bug fix update
2022-08-01 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-2710)
2022-11-04 00:00:00
Mageia: Security Advisory (MGASA-2022-0262)
2022-07-18 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-2317)
2022-09-14 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2022-07-12 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.17.12-alt1.p10
2022-07-29 00:00:00
Security fix for the ALT Linux 10 package golang version 1.18.4-alt1
2022-07-28 00:00:00
mageia
mageia
Updated golang packages fix security vulnerability
2022-07-16 22:58:20
suse
suse
Security update for go1.17 (important)
2022-08-04 00:00:00
Security update for go1.18 (important)
2022-08-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0242
2022-09-07 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0242
2022-09-07 00:00:00
amazon
amazon
Important: golist
2022-09-15 04:46:00
Important: golang-github-godbus-dbus
2022-10-17 21:46:00
Important: golang
2022-09-15 04:46:00
fedora
fedora
[SECURITY] Fedora 35 Update: fzf-0.29.0-2.fc35
2022-08-17 01:36:21