Authorization headers are cleared on cross-origin redirect. However, cookie headers which are sensitive headers and are official headers found in the spec, remain uncleared. There are active users using cookie headers in undici. This may lead to accidental leakage of cookie to a 3rd-party site or a malicious attacker who can control the redirection target (ie. an open redirector) to leak the cookie to the 3rd party site. This was patched in v5.7.1. By default, this vulnerability is not exploitable. Do not enable redirections, i.e. `maxRedirections: 0` (the default).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Authorization headers are cleared on cross-origin redirect. However, cookie headers which are sensitive     headers and are official headers found in the spec, remain uncleared. There are active users using cookie     headers in undici. This may lead to accidental leakage of cookie to a 3rd-party site or a malicious     attacker who can control the redirection target (ie. an open redirector) to leak the cookie to the 3rd     party site. This was patched in v5.7.1. By default, this vulnerability is not exploitable. Do not enable     redirections, i.e. `maxRedirections: 0` (the default). (CVE-2022-31151)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Authorization headers are cleared on cross-origin redirect. However, cookie headers which are sensitive
    headers and are official headers found in the spec, remain uncleared. There are active users using cookie
    headers in undici. This may lead to accidental leakage of cookie to a 3rd-party site or a malicious
    attacker who can control the redirection target (ie. an open redirector) to leak the cookie to the 3rd
    party site. This was patched in v5.7.1. By default, this vulnerability is not exploitable. Do not enable
    redirections, i.e. `maxRedirections: 0` (the default). (CVE-2022-31151)

ID	Name	Product	Family	Type	Severity
250603	Linux Distros Unpatched Vulnerability : CVE-2022-31151	Nessus	Misc.	Local	medium
417954	SCA: security update for undici (GHSA-q768-x9m6-m9qp)	Tenable Cloud Security	SCA Checks	Local	medium
417954	SCA: security update for undici (GHSA-q768-x9m6-m9qp)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2022-31151

medium

Tenable Plugins

medium

medium

medium