Authentication Downgrade

AsyncHttpClient is vulnerable to Authentication Downgrade. The vulnerability is due to improper handling of Digest authentication challenges with missing or empty nonces, which allows a malicious origin or proxy to downgrade authentication to Basic and obtain the user's username and password in a...