REDHAT-BUG-2361962: Medium severity libsoup vulnerability
When encountering an HTTP redirect, libsoup clients prior to version 3.6.5 send the HTTP Authorization header to the host that is the target of the redirection, allowing this host to impersonate the user to the host that performed the redirect.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2361962?
The severity of REDHAT-BUG-2361962 is considered to be high due to the potential for unauthorized user impersonation.
How do I fix REDHAT-BUG-2361962?
To fix REDHAT-BUG-2361962, update libsoup to version 3.6.5 or later.
What impact does REDHAT-BUG-2361962 have on user security?
REDHAT-BUG-2361962 allows a malicious host to impersonate authenticated users during HTTP redirection, compromising user security.
Which versions of libsoup are affected by REDHAT-BUG-2361962?
Versions of libsoup prior to 3.6.5 are affected by REDHAT-BUG-2361962.
Is REDHAT-BUG-2361962 a common vulnerability?
REDHAT-BUG-2361962 is a specific vulnerability in libsoup and is not categorized as a common vulnerability across all software.