6 matches found
CVE-2026-49331: Insufficient Verification of Data Authenticity
A flaw was found in openshift/oauth-proxy. On paths configured to bypass authentication skip-auth-regex, the proxy forwards client-supplied identity headers X-Forwarded-User, X-Forwarded-Email, X-Forwarded-Access-Token to the upstream application without stripping them. An unauthenticated attacke...
PT-2026-68189
Name of the Vulnerable Software and Affected Versions openshift/oauth-proxy affected versions not specified Description A flaw exists where the proxy fails to strip client-supplied identity headers on paths configured to bypass authentication via the skip-auth-regex setting. This allows an...
Linux Distros Unpatched Vulnerability : CVE-2022-32740
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A reply to a forwarded email article by a 3rd party could unintensionally expose the email content to the ticket customer under certain circumstances...
SUSE CVE-2022-32740
A reply to a forwarded email article by a 3rd party could unintensionally expose the email content to the ticket customer under certain circumstances...