Description

Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.

Remediation

References

CVE-2020-25017

Related Vulnerabilities

Oracle Database Server CVE-2019-2518 Vulnerability (CVE-2019-2518)

Apache Tomcat Improper Handling of Exceptional Conditions Vulnerability (CVE-2017-5664)

Atlassian Jira CVE-2020-36286 Vulnerability (CVE-2020-36286)

MySQL Cleartext Transmission of Sensitive Information Vulnerability (CVE-2017-3305)

WordPress 6.4.x Remote Code Execution (6.4 - 6.4.1)

Severity

High

Classification

CVE-2020-25017 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Tags

Missing Update Known Vulnerabilities