HTTP Client Vulnerabilities: Digest Auth Downgrade, Replay, Connection Pooling, Cookie Domain Issues

Vulnerability Overview GHSA-rqf5-2wx9-rf4: Missing nonce in Digest challenge, resulting in downgrade to Basic authentication with passwords sent in cleartext. GHSA-jmqx-x5g9-9p2w: Replay attack to a different host, where requests and credentials from the original host are sent to the new host. GHSA-vyp4-63h8-x5pm: The connection pool key omits the authentication subject, causing NTLM or Negotiate connections to be reused across different identities. GHSA-f9m8-v6b8-674a: The Cookie Domain attribute is not checked against the public suffix list, allowing cookies to be set for . GHSA-qhv6-3pmh-954d: Digest mutual authentication is disabled by a peer providing . Impact Scope Digest challenge: Missing nonce leads to downgrade to Basic authentication, with passwords transmitted in cleartext. Replay attack: Replay attacks directed at different hosts, sending requests and credentials intended for the original host. Connection pool reuse: NTLM or Negotiate connections are reused across different identities. Cookie Domain attribute: Allows cookies to be set for public suffixes. Digest mutual authentication: Disabled by peers that provide . Remediation Digest challenge: Ensure the Digest challenge includes a nonce to avoid downgrade to Basic authentication. Replay attack: Prevent replay attacks to different hosts, ensuring the validity of requests and credentials. Connection pool reuse: The connection pool key must include the authentication subject to prevent connection reuse across different identities. Cookie Domain attribute: Check the Cookie Domain attribute against the public suffix list to prevent cookies from being set for public suffixes. Digest mutual authentication: Ensure Digest mutual authentication is not disabled by peers providing . POC Code No specific POC code or exploit code is included in the page.

Goal Reached Thanks to every supporter — we hit 100%!

HTTP Client Vulnerabilities: Digest Auth Downgrade, Replay, Connection Pooling, Cookie Domain Issues

More from this source