HTTP Proxy header vulnerability

🗓️ 07 Apr 2022 13:59:22Reported by GitHub Advisory DatabaseType

PHP 7.0.8 HTTP Proxy header vulnerabilit

Reporter	Title	Published	Views	Family All 157
IBM Security Bulletins	Release of QRadar 7.2.8 Patch 4 (7.2.8.20170224202650) Updated w/Security Bulletins	10 May 201914:29	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in PHP affects PowerKVM (CVE-2016-5385)	18 Jun 201801:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect the IBM FlashSystem models 840 and 900	18 Feb 202301:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect the IBM FlashSystem model V840	18 Jun 201800:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security issues in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On	16 Jun 201820:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affecting web servers that run code in a CGI or CGI-like context affects IBM API Connect (CVE-2016-5385, CVE-2016-1000105)	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to various CGI vulnerabilities. (CVE-2016-5385, CVE-2016-5387, CVE-2016-5388)	16 Jun 201821:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Tomcat affect SAN Volume Controller, Storwize family and FlashSystem V9000 products	29 Mar 202301:48	–	ibm
Tenable Nessus	PHP 5.5.x < 5.5.38 / 5.6.x < 5.6.24 / 7.0.x < 7.0.9 Multiple Vulnerabilities	5 Aug 201600:00	–	nessus
Tenable Nessus	Amazon Linux AMI : php55 / php56 (ALAS-2016-728) (httpoxy)	2 Aug 201600:00	–	nessus

Vulners

Node

drupal drupalRange8.0–8.1.7composer

bugsnag bugsnag-laravelRange2–2.0.2composer

amphp artaxRange0.7.1–1.0.4composer

amphp artaxRange2.0.0–2.0.4composer

drupal coreRange8.0–8.1.7composer

guzzlehttp guzzleRange5–5.3.1composer

guzzlehttp guzzleRange4.0.0-rc2–4.2.4composer

guzzlehttp guzzleRange6–6.2.1composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-5385
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2016-5385.yaml
github	www.github.com/guzzle/guzzle/releases/tag/6.2.1
h20566	www.h20566.www2.hpe.com/hpsc/doc/public/display
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/7RMYXAVNYL2MOBJTFATE73TOVOEZYC5R/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/GXFEIMZPSVGZQQAYIQ7U7DFVX3IBSDLF/

05 Feb 2024 10:19Current

1.9Low risk

Vulners AI Score1.9

CVSS 25.1

CVSS 3.18.1

EPSS0.80902