Information Disclosure

tunnel-agent is vulnerable to information disclosure. When the proxy.auth option is used when receiving a GET request, the library will unintentionally return data from uninitialized memory. A malicious user can leverage this to obtain sensitive information on the system...