CVSS: 5.3EPSS: 0%CPEs: 31EXPL: 0CVE-2020-13956 – apache-httpclient: incorrect handling of malformed authority component in request URIs
https://notcve.org/view.php?id=CVE-2020-13956
28 Oct 2020 — Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution. Apache HttpClient versiones anteriores a 4.5.13 y 5.0.3, pueden interpretar inapropiadamente el componente authority malformado en las peticiones URI pasadas ??a la biblioteca como objeto java.net.URI y elegir el host de destino equivocado para una ejecución de la petición Red Hat Decisio... • https://lists.apache.org/thread.html/r03bbc318c81be21f5c8a9b85e34f2ecc741aa804a8e43b0ef2c37749%40%3Cissues.maven.apache.org%3E • CWE-20: Improper Input Validation •
CVSS: 8.8EPSS: 2%CPEs: 6EXPL: 0CVE-2020-15094 – RCE in Symfony
https://notcve.org/view.php?id=CVE-2020-15094
02 Sep 2020 — In Symfony before versions 4.4.13 and 5.1.5, the CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache class to handle requests. HttpCache uses internal headers like X-Body-Eval and X-Body-File to control the restoration of cached responses. The class was initially written with surrogate caching and ESI support in mind (all HTTP calls come from a trusted backend in that scenario). But when used by CachingHttpClient and if an attacker can control the response for a request bei... • https://github.com/symfony/symfony/commit/d9910e0b33a2e0f993abff41c6fbc86951b66d78 • CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer •
CVSS: 9.8EPSS: 1%CPEs: 4EXPL: 0CVE-2013-4366
https://notcve.org/view.php?id=CVE-2013-4366
30 Oct 2017 — http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have unspecified impact via vectors involving hostname verification. http/impl/client/HttpClientBuilder.java en Apache HttpClient en versiones 4.3.x anteriores a la 4.3.1 no garantiza que X509HostnameVerifier no sea null, lo que permite que atacantes provoquen un impacto sin especificar mediante vectores que implican la verificación de nombres de ho... • http://svn.apache.org/r1528614 • CWE-20: Improper Input Validation •
CVSS: 5.3EPSS: 1%CPEs: 7EXPL: 0CVE-2015-5262 – Ubuntu Security Notice USN-2769-1
https://notcve.org/view.php?id=CVE-2015-5262
15 Oct 2015 — http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors. http/conn/ssl/SSLConnectionSocketFactory.java en Apache HttpComponents HttpClient en versiones anteriores a 4.3.6 ignora el ajuste de configuración http.socket.timeout durante un handshake de SSL, lo que permite a atacantes remotos prov... • http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167962.html • CWE-399: Resource Management Errors •
CVSS: 5.8EPSS: 1%CPEs: 2EXPL: 2CVE-2014-3577 – CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix
https://notcve.org/view.php?id=CVE-2014-3577
18 Aug 2014 — org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field. org.apache.http.conn.... • http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html • CWE-297: Improper Validation of Certificate with Host Mismatch •
CVSS: 5.8EPSS: 0%CPEs: 4EXPL: 0CVE-2012-5783 – jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name
https://notcve.org/view.php?id=CVE-2012-5783
04 Nov 2012 — Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Apache Commons HttpClient v3.x, tal y como se utiliza en el Java SDK de Amazon Flexible Payments Service(FPS) y otros productos, no comprueba si el ... • http://lists.opensuse.org/opensuse-updates/2013-02/msg00078.html • CWE-295: Improper Certificate Validation •
CVSS: 4.3EPSS: 2%CPEs: 12EXPL: 0CVE-2011-1498
https://notcve.org/view.php?id=CVE-2011-1498
07 Jul 2011 — Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header. Apache HttpClient v4.x antes de v4.1.1 en Apache HttpComponents, cuando se utiliza con un servidor proxy de autenticación, envía el encabezado Proxy-Authorization al servidor de origen, lo que permite obtener información sensible a los servidores Web remoto... • http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061440.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •