Skip to content
OpenAdvisories
Medium WID-SEC-2023-1682 1 CVE

IBM InfoSphere Information Server: Schwachstelle ermöglicht Offenlegung von Informationen

Published Jul 6, 2023 · Updated Jul 6, 2023 · de-DE

Vendor: IBM Product: InfoSphere Information Server 11.7 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM InfoSphere Information Server ausnutzen, um Informationen offenzulegen.

Product

IBM InfoSphere Information Server ist eine Softwareplattform zur Integration heterogener Daten.

Vulnerabilities 1

  • Medium 6.1
    CVE-2023-32681 Public exploit

    Unintended leak of Proxy-Authorization header in requests

    Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `rebuild_proxies` to reattach the `Proxy-Authorization` header…

    psf requests python-pip requests Debian Ubuntu Azure Linux PyPI

Revision history

  1. #1

    Initiale Fassung

References