Misconfigured Reverse Proxy Servers Spill Credentials

2018-05-18 12:45

Researchers created a proof-of-concept attack that allows remote attackers to access protected APIs to extract credentials.

News URL

https://threatpost.com/misconfigured-reverse-proxy-servers-spill-credentials/132085/

#credential #proxy #reverseproxy #server

Related news

Okta Warns of Unprecedented Surge in Proxy-Driven Credential Stuffing Attacks (source)

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.