GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin a related issue to CVE-2018-1000007.

🗓️ 10 May 2021 07:00:00Reported by MicrosoftType

GNU Wget up to 1.21.1 does not omit the Authorization header on cross-origin redirects, related to CVE 2018 1000007.

Reporter	Title	Published	Views	Family All 184
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.58.0-alt1	24 Jan 201800:00	–	altlinux
FreeBSD	cURL -- Multiple vulnerabilities	24 Jan 201800:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Wget vulnerability (CVE-2021-31879)	30 Mar 202216:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect PowerKVM	17 Dec 201814:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL component shipped with IBM Rational ClearCase (CVE-2018-1000005, CVE-2018-1000007)	10 Jul 201808:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in cURL (CVE-2016-7141 CVE-2018-1000007)	30 Jul 201822:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been fixed in the IBM Security Access Manager Appliance	30 May 201921:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect QLogic Virtual Fabric Extension Module for IBM BladeCenter	10 Apr 202321:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by a vulnerability in cURL (CVE-2018-1000007)	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL/libcURL affect IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru	12 Sep 201823:20	–	ibm