GCVE-110-CERTCC-2016-905344

Advisory PublishedCVSS 4.3/10

Vulnetix · Advisory published August 15, 2016

HTTP CONNECT requests and 407 Proxy Authentication Required messages are not integrity protected and are susceptible to man-in-the-middle attacks. WebKit-based applications are additionally vulnerable to arbitrary HTML markup and JavaScript execution in the context of the originally requested domain.

Download JSON Open in Console

Risk Scores

CVSS 2.0

4.3/10

Medium · AV:A/AC:M/Au:N/C:P/I:P/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population4d1_direct_report1

certcc-cvss-temporal-env

temporal_score3.4remediation_levelOFreport_confidenceCenvironmental_score3.39068408847336target_distributionHenvironmental_vectorCDP:ND/TD:H/CR:ND/IR:ND/AR:ND

References

HTTP CONNECT and 407 Proxy Authentication Required messages are not integrity protected

url

HTTP CONNECT and 407 Proxy Authentication Required messages are not integrity protected

url

HTTP CONNECT and 407 Proxy Authentication Required messages are not integrity protected

advisory

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON