org.apache.httpcomponents.client5:httpclient5 vulnerabilities (Red Hat Lightwell)
3 vulnerabilities.
-
org.apache.httpcomponents.client5:httpclient5Red Hat Lightwell Apache HttpComponents Client: TLS hostname verification silently disabled on the async transport (default config, MITM) 9.1 Critical -
org.apache.httpcomponents.client5:httpclient5Red Hat Lightwell Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS 5.3 Medium -
org.apache.httpcomponents.client5:httpclient5Red Hat Lightwell Apache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verification 7.3 High