Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7599
HistoryOct 11, 2018 - 8:16 a.m.

Information Disclosure

2018-10-1108:16:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.036 Low

EPSS

Percentile

91.7%

System.Net.Http is vulnerable to an information disclosure. The library does not clear it’s authentication headers during redirection, allowing a malicious user to use a redirect to gain access to information in the authentication header.