Lucene search
Veracode Vulnerability DatabaseVERACODE:21733HistoryOct 18, 2019 - 3:27 a.m.
Information Disclosure
2019-10-1803:27:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.002
Percentile
59.7%
reactor-netty is vulnerable to information disclosure. Authentication/Authorization headers are passed through redirects, allowing remote unauthenticated malicious user to gain access to credentials for a different server than they have access to.
References
Related
osv
osv
Insufficiently Protected Credentials in Pivotal Reactor Netty
2019-10-23 14:14:32
CVE-2019-11284
2019-10-17 18:15:12
prion
prion
Authorization
2019-10-17 18:15:00
cvelist
cvelist
CVE-2019-11284 Reactor Netty authentication leak in redirects
2019-10-17 17:40:12
cve
cve
CVE-2019-11284
2019-10-17 18:15:12
github
github
Insufficiently Protected Credentials in Pivotal Reactor Netty
2019-10-23 14:14:32
nvd
nvd
CVE-2019-11284
2019-10-17 18:15:12