CVE-2011-1498

🗓️ 07 Jul 2011 21:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 109 Views

Apache HttpClient 4.x sends Proxy-Authorization header to origin server, allowing remote servers to obtain sensitive information

Reporter	Title	Published	Views	Family All 52
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been fixed in IBM Security Verify Governance, Identity Manager virtual appliance component (ISVG IMVA)	21 Sep 202120:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Rational ClearCase (CVE-2021-20492, CVE-2021-29754, CVE-2021-29736, CVE-2015-5262, CVE-2014-3577, CVE-2012-6153, CVE-2011-1498)	16 Sep 202106:01	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in embedded IBM WebSphere Application Server which is shipped with IBM Tivoli Netcool Configuration Manager (CVE-2015-5262, CVE-2014-3577, CVE-2012-6153, CVE-2011-1498)	29 Jun 202110:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in WebSphere Application Server affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise	21 Sep 202109:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Apache HttpComponents and HttpCommons affect WebSphere Application Server shipped with IBM WebSphere Application Server Patterns (CVE-2015-5262, CVE-2014-3577, CVE-2012-6153, CVE-2011-1498)	14 May 202118:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache HttpComponents and HttpCommons affect WebSphere Application Server, which is shipped as part of IBM Cloud Pak for Applications (CVE-2015-5262, CVE-2014-3577, CVE-2012-6153, CVE-2011-1498)	2 Jun 202121:54	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager	24 May 202122:52	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2015-5262, CVE-2014-3577, CVE-2012-6153, CVE-2011-1498)	6 Jul 202121:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2015-5262, CVE-2014-3577, CVE-2012-6153, CVE-2011-1498)	18 May 202109:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability from Apache HttpComponents affects IBM Cloud Pak System (CVE-2011-1498, CVE-2015-5262)	6 May 202011:57	–	ibm

NVD

Node

apache httpclientMatch4.0

apache httpclientMatch4.0alpha1

apache httpclientMatch4.0alpha2

apache httpclientMatch4.0alpha3

apache httpclientMatch4.0alpha4

apache httpclientMatch4.0beta1

apache httpclientMatch4.0beta2

apache httpclientMatch4.0.1

apache httpclientMatch4.1

apache httpclientMatch4.1alpha1

apache httpclientMatch4.1alpha2

apache httpclientMatch4.1beta1

Source	Link
lists	www.lists.fedoraproject.org/pipermail/package-announce/2011-June/061440.html
marc	www.marc.info/
marc	www.marc.info/
apache	www.apache.org/dist/httpcomponents/httpclient/RELEASE_NOTES-4.1.x.txt
securityfocus	www.securityfocus.com/bid/46974
securityreason	www.securityreason.com/securityalert/8298
marc	www.marc.info/
kb	www.kb.cert.org/vuls/id/153049
marc	www.marc.info/
openwall	www.openwall.com/lists/oss-security/2011/04/08/1

29 Apr 2026 01:13Current

8.2High risk

Vulners AI Score8.2

CVSS 24.3

EPSS0.04395

CWE-200