Описание
A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect.
Отчет
A moderate-severity information disclosure flaw was found in libsoup, affecting the libsoup and libsoup3 components as shipped in Red Hat Enterprise Linux 8, 9, and 10, and Red Hat In-Vehicle OS, with the issue delegated to the Fedora community for community-project packages. When a libsoup-based client follows an HTTP redirect, it mistakenly sends the HTTP Authorization header to the new host that the redirect points to. This allows the host that is the target of the redirection to capture the client's credentials and impersonate the user to the original host that issued the redirect. Exploitation requires network access with high attack complexity, no privileges, and user interaction, and affects the confidentiality and integrity of the authenticated session but not availability. Red Hat and the upstream CVE record both assess this flaw with a CVSS score of 6.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N), so the Red Hat severity matches upstream. A fix for the affected Red Hat products is being pursued.
Меры по смягчению последствий
Currently, no mitigation is available for this vulnerability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | libsoup | Out of support scope | ||
| Red Hat Enterprise Linux 7 | libsoup | Out of support scope | ||
| Red Hat Enterprise Linux 10 | libsoup3 | Fixed | RHSA-2025:7505 | 13.05.2025 |
| Red Hat Enterprise Linux 8 | libsoup | Fixed | RHSA-2025:4560 | 06.05.2025 |
| Red Hat Enterprise Linux 8 | libsoup | Fixed | RHSA-2025:4560 | 06.05.2025 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | libsoup | Fixed | RHSA-2025:4538 | 06.05.2025 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | libsoup | Fixed | RHSA-2025:4609 | 07.05.2025 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | libsoup | Fixed | RHSA-2025:4609 | 07.05.2025 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | libsoup | Fixed | RHSA-2025:4609 | 07.05.2025 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | libsoup | Fixed | RHSA-2025:4624 | 07.05.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.8 Medium
CVSS3
Связанные уязвимости
A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect.
A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect.
Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server
A flaw was found in libsoup. When libsoup clients encounter an HTTP re ...
A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect.
EPSS
6.8 Medium
CVSS3