Описание
Play Framework Inadequate Encryption Strength vulnerability
An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23. When configured to make requests using an authenticated HTTP proxy, play-ws may sometimes, typically under high load, when connecting to a target host using https, expose the proxy credentials to the target host.
Пакеты
Наименование
com.typesafe.play:play-ws_2.12
maven
Затронутые версииВерсия исправления
>= 2.5.0, < 2.6.24
2.6.24
Связанные уязвимости
CVSS3: 7.5
nvd
больше 6 лет назад
An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23. When configured to make requests using an authenticated HTTP proxy, play-ws may sometimes, typically under high load, when connecting to a target host using https, expose the proxy credentials to the target host.