Skip to content
OpenAdvisories

Package · Go

github.com/kerberos-io/agent/machinery

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.9

    Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect

    Kerberos Agent is an open source video (surveillance) management agent. Prior to version 3.6.26, the Kerberos Hub upload path sends the agent's Hub credentials in the custom `X-Kerberos-Hub-PrivateKey` and `X-Kerberos-Hub-PublicKey` request headers to the ope…