PT-2011-3165

Name of the Vulnerable Software and Affected Versions Apache HttpClient versions 4.0 through 4.1.0 Description The issue allows remote web servers to obtain sensitive information by logging the Proxy-Authorization header, which is sent to the origin server when Apache HttpClient is used with an...

CVE-2011-1498: Exposure of Sensitive Information to an Unauthorized Actor

Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header...