The Mechanize library is used for automating interaction with websites. Mechanize automatically stores and sends cookies, follows redirects, and can follow links and submit forms. In versions prior to 2.8.5 the Authorization header is leaked after a redirect to a different port on the same site. Users are advised to upgrade to Mechanize v2.8.5 or later. There are no known workarounds for this issue.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Mechanize library is used for automating interaction with websites. Mechanize automatically stores and     sends cookies, follows redirects, and can follow links and submit forms. In versions prior to 2.8.5 the     Authorization header is leaked after a redirect to a different port on the same site. Users are advised to     upgrade to Mechanize v2.8.5 or later. There are no known workarounds for this issue. (CVE-2022-31033)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The Mechanize library is used for automating interaction with websites. Mechanize automatically stores and
    sends cookies, follows redirects, and can follow links and submit forms. In versions prior to 2.8.5 the
    Authorization header is leaked after a redirect to a different port on the same site. Users are advised to
    upgrade to Mechanize v2.8.5 or later. There are no known workarounds for this issue. (CVE-2022-31033)

ID	Name	Product	Family	Type	Severity
224656	Linux Distros Unpatched Vulnerability : CVE-2022-31033	Nessus	Misc.	Local	high
411184	SCA: security update for mechanize (GHSA-64qm-hrgp-pgr9)	Tenable Cloud Security	SCA Checks	Local	high
411184	SCA: security update for mechanize (GHSA-64qm-hrgp-pgr9)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2022-31033

high

Tenable Plugins

high

high

high