A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions.
CVE-2023-0833 - Medium Severity Vulnerability
Library home page: https://github.com/square/okhttp
Path to vulnerable library: /lib/GitHub_API/okhttp-3.12.13.jar
Dependency Hierarchy: - :x: **okhttp-3.12.13.jar** (Vulnerable Library)
Found in base branch: main
A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions.
Publish Date: 2023-09-27
URL: CVE-2023-0833
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: High - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: None - Availability Impact: None
For more information on CVSS3 Scores, click here.Type: Upgrade version
Release Date: 2023-09-27
Fix Resolution: 4.9.2
Step up your Open Source Security Game with Mend here