Lucene search
GoogleOSV:GHSA-J52R-XC68-Q8F4HistoryOct 23, 2019 - 2:14 p.m.
Insufficiently Protected Credentials in Pivotal Reactor Netty
2019-10-2314:14:32
Google
osv.dev
10
EPSS
0.002
Percentile
59.7%
Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to.
Related
veracode
veracode
Information Disclosure
2019-10-18 03:27:50
prion
prion
Authorization
2019-10-17 18:15:00
osv
osv
CVE-2019-11284
2019-10-17 18:15:12
cvelist
cvelist
CVE-2019-11284 Reactor Netty authentication leak in redirects
2019-10-17 17:40:12
cve
cve
CVE-2019-11284
2019-10-17 18:15:12
github
github
Insufficiently Protected Credentials in Pivotal Reactor Netty
2019-10-23 14:14:32
nvd
nvd
CVE-2019-11284
2019-10-17 18:15:12