GHSA-J52R-XC68-Q8F4 Insufficiently Protected Credentials in Pivotal Reactor Netty

🗓️ 23 Oct 2019 14:14:32Reported by GoogleType

osv🔗 osv.dev👁 29 Views

Insufficiently Protected Credentials in Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2019-11284	16 Jan 202412:37	–	circl
CVE	CVE-2019-11284	17 Oct 201917:40	–	cve
Cvelist	CVE-2019-11284 Reactor Netty authentication leak in redirects	17 Oct 201917:40	–	cvelist
EUVD	EUVD-2019-0705	7 Oct 202500:30	–	euvd
Github Security Blog	Insufficiently Protected Credentials in Pivotal Reactor Netty	23 Oct 201914:14	–	github
NVD	CVE-2019-11284	17 Oct 201918:15	–	nvd
Prion	Authorization	17 Oct 201918:15	–	prion
Spring Security Advisories	Reactor Netty authentication leak in redirects	11 Oct 201900:00	–	spring
Veracode	Information Disclosure	18 Oct 201903:27	–	veracode
vulnersOsv	ai.hyacinth.framework:core-service-admin-server (>=0.5.2 <=0.5.5), ai.hyacinth.framework:core-service-gateway-server (>=0.5.2 <=0.5.5) +198 more potentially affected by CVE-2019-11284 via io.projectreactor.netty:reactor-netty (>=0.8.0.RELEASE <=0.8.10.RELEASE)	23 Oct 201914:14	–	vulnersosv