CVE-2011-1498
- State
- Published
- Severity
- Not scored
- Published
- Jul 7, 2011
- Updated
- Aug 6, 2024
- Reserved
- Mar 21, 2011
Description
Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [httpclient-users] 20110224 Proxy-Authorization header received on server sidemailing-list
- [oss-security] 20110408 Re: Apache HttpClient CVE request [VU#153049]mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=709531
- [httpclient-users] 20110224 Re: Proxy-Authorization header received on server sidemailing-list
- [httpclient-users] 20110224 RE: Proxy-Authorization header received on server sidemailing-list
- [oss-security] 20110407 Apache HttpClient CVE request [VU#153049]mailing-list
- https://issues.apache.org/jira/browse/HTTPCLIENT-1061
- VU#153049third-party-advisory
- 46974vdb-entry
- [httpclient-users] 20110224 Re: Proxy-Authorization header received on server sidemailing-list
- 8298third-party-advisory
- FEDORA-2011-7747vendor-advisory
- [httpclient-users] 20110224 RE: Proxy-Authorization header received on server sidemailing-list
- http://www.apache.org/dist/httpcomponents/httpclient/RELEASE_NOTES-4.1.x.txt
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.