Lucene search
+L

2 matches found

Mageia
Mageia
added 2017/03/23 7:19 a.m.44 views

Updated kdelibs4 packages fix security vulnerability

Using a malicious PAC file, and then using exfiltration methods in the PAC function FindProxyForURL enables the attacker to expose full https URLs. This is a security issue since https URLs may contain sensitive information in the URL authentication part user:password@host, and in the path and th...

5.5CVSS0.3AI score0.00828EPSS
SaveExploits0References2
FreeBSD
FreeBSD
added 2017/02/28 12:0 a.m.26 views

kio: Information Leak when accessing https when using a malicious PAC file

Albert Astals Cid reports: Using a malicious PAC file, and then using exfiltration methods in the PAC function FindProxyForURL enables the attacker to expose full https URLs. This is a security issue since https URLs may contain sensitive information in the URL authentication part...

SaveExploits0References1
Rows per page
Query Builder