Описание
A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needed | |
| esm-apps/resolute | released | 2.74.3-10.1ubuntu5+esm1 |
| esm-infra-legacy/xenial | released | 2.52.2-1ubuntu0.3+esm6 |
| esm-infra/bionic | released | 2.62.1-1ubuntu0.4+esm7 |
| esm-infra/focal | released | 2.70.0-1ubuntu0.5+esm2 |
| esm-infra/xenial | ignored | end of ESM support, was needs-triage |
| jammy | released | 2.74.2-3ubuntu0.7 |
| noble | released | 2.74.3-6ubuntu1.7 |
| questing | released | 2.74.3-10.1ubuntu4.1 |
| resolute | needed |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needs-triage | |
| esm-apps/jammy | needs-triage | |
| jammy | needs-triage | |
| noble | needs-triage | |
| questing | ignored | end of life, was needs-triage |
| resolute | needs-triage | |
| upstream | needs-triage |
Показывать по
5.9 Medium
CVSS3
Связанные уязвимости
A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.
A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.
Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment
A flaw was found in libsoup. When establishing HTTPS tunnels through a ...
5.9 Medium
CVSS3