CVE-2011-1498
Fixed in a distro release EPSS 7%
Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header.
Products: apache httpclient
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.httpcomponents:httpclient | 4.1.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | hadoop-fips-3.3.6 | no fix |
| Chainguard | hadoop-fips-3.4.2 | no fix |
| Chainguard | hadoop-fips-3.5 | no fix |
| Debian 12 | httpcomponents-client | 4.1.1-1 |
| Debian 13 | httpcomponents-client | 4.1.1-1 |
| Debian 14 | httpcomponents-client | 4.1.1-1 |