2 matches found
curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies
A flaw was found in curl. When curl is configured to use distinct proxies for different URL schemes, a redirect from a URL using an authenticated proxy to one using an unauthenticated proxy can inadvertently expose the initial proxy's credentials. This improper credential management CWE-522 may...
5.9CVSS6.4AI score0.00719EPSS
SaveExploits1References5
CVE-2023-25721
Veracode Scan Jenkins Plugin exposes proxy credentials in logs for versions prior to 23.3.19.0 when proxy is used with credentials and Jenkins global debug is enabled, and a scan runs on remote agent jobs. The root cause is information disclosure in job logs accessible to users who can view logs,...
6.5CVSS6.4AI score0.00647EPSS
SaveExploits0References2Affected Software1
20