Lucene search
GoogleOSV:CVE-2019-11284HistoryOct 17, 2019 - 6:15 p.m.
CVE-2019-11284
2019-10-1718:15:12
Google
osv.dev
3
Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to.
References
Related
osv
osv
Insufficiently Protected Credentials in Pivotal Reactor Netty
2019-10-23 14:14:32
cve
cve
CVE-2019-11284
2019-10-17 18:15:12
veracode
veracode
Information Disclosure
2019-10-18 03:27:50
prion
prion
Authorization
2019-10-17 18:15:00
cvelist
cvelist
CVE-2019-11284 Reactor Netty authentication leak in redirects
2019-10-17 17:40:12
github
github
Insufficiently Protected Credentials in Pivotal Reactor Netty
2019-10-23 14:14:32
nvd
nvd
CVE-2019-11284
2019-10-17 18:15:12