IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.3Alta

CVE-2026-40542Apache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verification

Apache Software Foundation Apache HttpClient; Red Hat OpenShift Developer Tools and Services 4.12; Red Hat OpenShift Developer Tools and Services 4.13; Red Hat… Publicada: (hace 6 meses)

Descripción

Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification. Users are recommended to upgrade to version 5.6.1, which fixes this issue.

Debilidad (CWE): CWE-304CWE-325

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Apache Software Foundation Apache HttpClient 5.6 – < 5.6.1
apache httpclient 5.6
ocp tools 4.12 —
ocp tools 4.13 —
ocp tools 4.14 —
ocp tools 4.15 —
ocp tools 4.16 —
ocp tools 4.17 —
ocp tools 4.18 —
ocp tools 4.19 —
ocp tools 4.20 —
ocp tools 4.21 —
ocp tools 4.22 —
Red Hat Cryostat 4 —
Red Hat Migration Toolkit for Applications 8 —
Red Hat OpenShift Developer Tools and Services all versions
Red Hat OpenShift Developer Tools and Services 4.12 all versions
Red Hat OpenShift Developer Tools and Services 4.13 all versions
Red Hat OpenShift Developer Tools and Services 4.14 all versions
Red Hat OpenShift Developer Tools and Services 4.15 all versions
Red Hat OpenShift Developer Tools and Services 4.16 all versions
Red Hat OpenShift Developer Tools and Services 4.17 all versions
Red Hat OpenShift Developer Tools and Services 4.18 all versions
Red Hat OpenShift Developer Tools and Services 4.19 all versions
Red Hat OpenShift Developer Tools and Services 4.20 all versions
Red Hat OpenShift Developer Tools and Services 4.21 all versions
Red Hat OpenShift Developer Tools and Services 4.22 all versions
Red Hat OpenShift Serverless —
Red Hat Red Hat AMQ Broker 7 —
Red Hat Red Hat AMQ Clients —
Red Hat Red Hat build of Apache Camel 4 for Quarkus 3 —
Red Hat Red Hat build of Apache Camel for Spring Boot 4 —
Red Hat Red Hat build of Apache Camel - HawtIO 4 —
Red Hat Red Hat build of Apicurio Registry 2 —
Red Hat Red Hat build of Apicurio Registry 3 —
Red Hat Red Hat build of Debezium 3 —
Red Hat Red Hat build of OptaPlanner 8 —
Red Hat Red Hat build of Quarkus —
Red Hat Red Hat Certificate System 10 —
Red Hat Red Hat Data Grid 8 —
Red Hat Red Hat Enterprise Linux 10 —
Red Hat Red Hat Enterprise Linux 7 —
Red Hat Red Hat Enterprise Linux 8 —
Red Hat Red Hat Enterprise Linux 9 —
Red Hat Red Hat Fuse 7 —
Red Hat Red Hat JBoss Core Services —
Red Hat Red Hat JBoss Enterprise Application Platform 7 —
Red Hat Red Hat JBoss Enterprise Application Platform 8 —
Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack —
Red Hat Red Hat JBoss Web Server 5 —
Red Hat Red Hat JBoss Web Server 6 —

Referencias y parches

Coincidencias CPE (NVD) (1)
  • cpe:2.3:a:apache:httpclient:5.6:-:*:*:*:*:*:*

CVE recientes del mismo producto — Red Hat Enterprise Linux

5.5Media
CVE-2026-127101

Sssd: sssd: null pointer dereference in pam responder when protocol version negotiation is skipped

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in SSSD's PAM responder. A local attacker can send an authentication request without first negotiating the client protocol version. The responder dereferences a NULL protocol-version pointer and crashes, disrupting SSSD-backed authentication.…

5.5Media
CVE-2026-127100

Sssd: sssd: local denial of service through unchecked oauth2 json code type in pam responder

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in SSSD's PAM responder on builds with the JSON PAM extension enabled. A local attacker can submit a crafted authentication request containing a non-string OAuth2 code value. Missing JSON type validation leads to a NULL pointer dereference, t…

5.9Media
CVE-2026-127099

Sssd: sssd: stack buffer overflow during rsa certificate-to-ssh key conversion

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in SSSD's conversion of X.509 certificate RSA public keys to SSH keys. Missing size checks before copying RSA components into fixed-size stack buffers can cause a stack buffer overflow. An attacker able to supply a certificate with oversized …

5.5Media
CVE-2026-126831

Cpio: cpio: stack-based buffer overflow in write_out_tar_header() with long usernames/groupnames

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in cpio. A local user can cause a Denial of Service (DoS) by triggering a stack-based buffer overflow when creating archives in tar or ustar formats. When archiving files owned by users or groups with names exceeding 32 characters, cpio copie…

7.9Alta
CVE-2026-121876

Sandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers (confidential peer pods). systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by ty…