CVE-2011-1498

Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin…

published July 7, 2011

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06685 · 93.9th percentile
Published
2011-07-07T21:00Z
EPSS history
Timeline
  • 07 JUL 21:00Z
    Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin…
    cvelistv5