Information disclosure in urllib3 - CVE-2024-37891

Vulnerability identifier: #VU92262

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-37891

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

Affected software:
urllib3
Oracle Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Software Development Kit 12
F5OS
SUSE Manager Server Module
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Proxy Module
SUSE Manager Client Tools for SLE Micro
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
IBM AIX
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Anolis OS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE Manager Client Tools for RHEL, Liberty and Clones
Red Hat Enterprise Linux Server - AUS
SUSE Manager Client Tools for Debian
SUSE Manager Client Tools for SLE
Public Cloud Module
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise High Performance Computing
Python 3 Module
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Fedora
SUSE Manager Client Tools for Ubuntu 20.04
SUSE Manager Client Tools for Ubuntu 22.04
IBM InfoSphere Information Server
IBM Cloud Pak for Data System
IBM Maximo Application Suite - AI Broker
IBM Concert Software
Cryostat
IBM Watson Knowledge Catalog in Cloud Pak for Data
Splunk User Behavior Analytics (UBA)
Oracle Communications Diameter Signaling Router
IBM Spectrum Protect Plus
Oracle Communications Cloud Native Core Binding Support Function
Oracle Communications Cloud Native Core Network Exposure Function
Oracle Communications Cloud Native Core Network Repository Function
IBM Observability with Instana
Run Once Duration Override Operator for Red Hat OpenShift
Multicluster GlobalHub
IBM Process Mining
Ansible Automation Platform
Qradar Advisor
Red Hat Advanced Cluster Management for Kubernetes
IBM Fusion HCI
APEX Cloud Platform for Red Hat OpenShift
Red Hat OpenShift Dev Spaces
IBM Cloud Object Storage Systems
QRadar User Behavior Analytics
Red Hat Advanced Cluster Security for Kubernetes
Splunk Add-on for Google Cloud Platform
IBM Decision Optimization for Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Kube Descheduler Operator for Red Hat OpenShift
IBM Sterling Connect:Direct Web Services
Red Hat Satellite
Splunk Add-on for Amazon Web Services
Red Hat OpenStack
NetWorker
IBM Robotic Process Automation
IBM Business Automation Workflow
Nautobot
Oracle Financial Services Compliance Studio
Oracle Banking Corporate Lending Process Management
Oracle Banking Origination
Red Hat OpenShift GitOps
IBM QRadar Network Packet Capture
Storage Sentinel Anomaly Scan Engine
Oracle Utilities Network Management System
Guardium Data Security Center (GDSC)
Security QRadar EDR
watsonx Code Assistant for Ansible
Oracle Business Intelligence Enterprise Edition
Maximo Application Suite - Predict Component
Oracle Communications User Data Repository
Oracle Communications Policy Management
IBM Application Suite - IBM Asset Data Dictionary Component
APEX Cloud Platform for Microsoft Azure
QRadar App SDK
QRadar Deployment Intelligence App
OpenManage Network Integration (OMNI)
Storage Resource Manager
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
watsonx Assistant Cartridge
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
SOAR QRadar Plugin App
IBM QRadar Incident Forensics
Db2 Big SQL
Maximo Application Suite - IoT Component
Maximo Application Suite - Monitor Component
Maximo Application Suite - Edge Data Collector
IBM Virtualization Engine TS7700 3948-VED
Storage Protect Plus File Systems Agent
SmartFabric OS10
Guardium Data Protection
IBM Netezza for Cloud Pak for Data
Robotic Process Automation for Cloud Pak
SmartFabric Storage Software
BIG-IP
Virtualization Engine TS7700 3957-VED
QRadar Suite
Splunk Enterprise
IBM VIOS
Python for Scientific Computing
Communications Unified Assurance
Oracle Communications Billing and Revenue Management
IBM Qradar SIEM
NetWorker Management Console
MySQL Cluster
BIG-IQ Centralized Management
Juniper Junos Space
PeopleSoft Enterprise PeopleTools
IBM API Connect
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python-pip-whl (Ubuntu package)
python-pip (Ubuntu package)
python3-urllib3 (Ubuntu package)
python-urllib3 (Ubuntu package)
python3-pip (Ubuntu package)
satellite-maintain (Red Hat package)
rubygem-kafo_wizards (Red Hat package)
postgresql-evr (Red Hat package)
yggdrasil-worker-forwarder (Red Hat package)
rubygem-ruby2_keywords (Red Hat package)
rubygem-apipie-params (Red Hat package)
rubygem-smart_proxy_dhcp_remote_isc (Red Hat package)
rubygem-faraday-cookie_jar (Red Hat package)
rubygem-smart_proxy_dhcp_infoblox (Red Hat package)
rubygem-declarative (Red Hat package)
rubygem-hammer_cli_foreman_tasks (Red Hat package)
rubygem-hammer_cli_foreman_virt_who_configure (Red Hat package)
rubygem-hammer_cli_foreman_webhooks (Red Hat package)
rubygem-hammer_cli_foreman_puppet (Red Hat package)
rubygem-uber (Red Hat package)
rubygem-sd_notify (Red Hat package)
rubygem-trailblazer-option (Red Hat package)
rubygem-server_sent_events (Red Hat package)
rubygem-hammer_cli_foreman_leapp (Red Hat package)
rubygem-fog-xml (Red Hat package)
rubygem-websocket-extensions (Red Hat package)
rubygem-rkerberos (Red Hat package)
libcomps (Red Hat package)
python-debian (Red Hat package)
rubygem-hammer_cli_foreman_kubevirt (Red Hat package)
rubygem-foreman_kubevirt (Red Hat package)
python-requirements-parser (Red Hat package)
rubygem-hammer_cli_foreman_openscap (Red Hat package)
rubygem-net_http_unix (Red Hat package)
python-ruamel-yaml-clib (Red Hat package)
rubygem-hammer_cli_foreman_remote_execution (Red Hat package)
ansiblerole-foreman_scap_client (Red Hat package)
rubygem-hammer_cli_foreman_templates (Red Hat package)
rubygem-hammer_cli_foreman_azure_rm (Red Hat package)
rubygem-xmlrpc (Red Hat package)
rubygem-polyglot (Red Hat package)
rubygem-timeliness (Red Hat package)
rubygem-net-ssh-krb (Red Hat package)
rubygem-smart_proxy_dynflow_core (Red Hat package)
rubygem-hammer_cli_foreman_bootdisk (Red Hat package)
rubygem-bundler_ext (Red Hat package)
rubygem-rsec (Red Hat package)
python-colorama (Red Hat package)
rubygem-openscap (Red Hat package)
python-galaxy-importer (Red Hat package)
python-json-stream-rs-tokenizer (Red Hat package)
python-iniparse (Red Hat package)
rubygem-google-cloud-compute (Red Hat package)
rubygem-foreman_scap_client (Red Hat package)
rubygem-mqtt (Red Hat package)
python-sqlparse (Red Hat package)
python-gnupg (Red Hat package)
python-inflection (Red Hat package)
python-webencodings (Red Hat package)
puppet-agent-oauth (Red Hat package)
rubygem-foreman_virt_who_configure (Red Hat package)
rubygem-graphql-batch (Red Hat package)
rubygem-apipie-bindings (Red Hat package)
rubygem-redfish_client (Red Hat package)
rubygem-concurrent-ruby-edge (Red Hat package)
rubygem-http_parser.rb (Red Hat package)
rubygem-domain_name (Red Hat package)
rubygem-fx (Red Hat package)
rubygem-ldap_fluff (Red Hat package)
rubygem-hammer_cli_foreman_ansible (Red Hat package)
python-ptyprocess (Red Hat package)
python-mccabe (Red Hat package)
rubygem-spidr (Red Hat package)
python-defusedxml (Red Hat package)
rubygem-promise.rb (Red Hat package)
rubygem-algebrick (Red Hat package)
python-schema (Red Hat package)
rubygem-ms_rest (Red Hat package)
rubygem-websocket-driver (Red Hat package)
libsolv (Red Hat package)
python-solv (Red Hat package)
rubygem-validates_lengths_from_database (Red Hat package)
rubygem-colorize (Red Hat package)
rubygem-ruby-libvirt (Red Hat package)
python-dataclasses (Red Hat package)
rubygem-gitlab-sidekiq-fetcher (Red Hat package)
rubygem-google-apis-core (Red Hat package)
python-commonmark (Red Hat package)
rubygem-smart_proxy_dynflow (Red Hat package)
rubygem-smart_proxy_shellhooks (Red Hat package)
rubygem-newt (Red Hat package)
python-websockify (Red Hat package)
python-toml (Red Hat package)
rubygem-netrc (Red Hat package)
rubygem-smart_proxy_openscap (Red Hat package)
rubygem-rb-inotify (Red Hat package)
rubygem-rubyipmi (Red Hat package)
rubygem-smart_proxy_remote_execution_ssh (Red Hat package)
rubygem-gapic-common (Red Hat package)
rubygem-ms_rest_azure (Red Hat package)
rubygem-fog-libvirt (Red Hat package)
python-lockfile (Red Hat package)
rubygem-rabl (Red Hat package)
rubygem-memoist (Red Hat package)
rubygem-signet (Red Hat package)
python-ruamel-yaml (Red Hat package)
python-ecdsa (Red Hat package)
python-pyrsistent (Red Hat package)
rubygem-azure_mgmt_resources (Red Hat package)
python-future (Red Hat package)
rubygem-azure_mgmt_subscriptions (Red Hat package)
rubygem-net-ldap (Red Hat package)
python-docutils (Red Hat package)
rubygem-pulp_ansible_client (Red Hat package)
python-pulp-ansible (Red Hat package)
rubygem-azure_mgmt_compute (Red Hat package)
rubygem-azure_mgmt_storage (Red Hat package)
rubygem-azure_mgmt_network (Red Hat package)
python-drf-spectacular (Red Hat package)
python-pulp-cli (Red Hat package)
python-pulp-glue (Red Hat package)
rubygem-google-apis-compute_v1 (Red Hat package)
python-drf-nested-routers (Red Hat package)
rubygem-excon (Red Hat package)
rubygem-faraday-em_synchrony (Red Hat package)
rubygem-get_process_mem (Red Hat package)
rubygem-faraday-patron (Red Hat package)
rubygem-faraday-em_http (Red Hat package)
rubygem-faraday-rack (Red Hat package)
puppet-foreman_scap_client (Red Hat package)
python-django-lifecycle (Red Hat package)
foreman-discovery-image-service (Red Hat package)
rubygem-deacon (Red Hat package)
python-djangorestframework-queryfields (Red Hat package)
satellite-convert2rhel-toolkit (Red Hat package)
rubygem-faraday-net_http (Red Hat package)
rubygem-faraday-httpclient (Red Hat package)
foreman-fapolicyd (Red Hat package)
rubygem-openscap_parser (Red Hat package)
python-asyncio-throttle (Red Hat package)
rubygem-faraday-retry (Red Hat package)
rubygem-acts_as_list (Red Hat package)
python-async-lru (Red Hat package)
python-bleach-allowlist (Red Hat package)
rubygem-faraday-multipart (Red Hat package)
rubygem-marcel (Red Hat package)
rubygem-oauth-tty (Red Hat package)
rubygem-smart_proxy_discovery (Red Hat package)
rubygem-http-cookie (Red Hat package)
rubygem-crass (Red Hat package)
python-brotli (Red Hat package)
rubygem-journald-native (Red Hat package)
libsodium (Red Hat package)
rubygem-method_source (Red Hat package)
rubygem-oauth (Red Hat package)
rubygem-formatador (Red Hat package)
rubygem-google-cloud-common (Red Hat package)
rubygem-faraday-excon (Red Hat package)
rubygem-angular-rails-templates (Red Hat package)
python-et-xmlfile (Red Hat package)
rubygem-rack-cors (Red Hat package)
rubygem-hammer_cli_foreman_google (Red Hat package)
rubygem-jsonpath (Red Hat package)
python-django-readonly-field (Red Hat package)
rubygem-fog-openstack (Red Hat package)
rubygem-recursive-open-struct (Red Hat package)
createrepo_c (Red Hat package)
rubygem-os (Red Hat package)
rubygem-version_gem (Red Hat package)
rubygem-little-plugger (Red Hat package)
rubygem-mini_mime (Red Hat package)
rubygem-concurrent-ruby (Red Hat package)
rubygem-faraday_middleware (Red Hat package)
rubygem-smart_proxy_dns_infoblox (Red Hat package)
rubygem-hammer_cli_foreman_admin (Red Hat package)
rubygem-faraday-net_http_persistent (Red Hat package)
pulpcore-obsolete-packages (Red Hat package)
rubygem-fog-json (Red Hat package)
rubygem-globalid (Red Hat package)
rubygem-kafo_parsers (Red Hat package)
rubygem-foreman_leapp (Red Hat package)
python-enrich (Red Hat package)
rubygem-et-orbi (Red Hat package)
python-deprecated (Red Hat package)
rubygem-googleauth (Red Hat package)
rubygem-hammer_cli_foreman_discovery (Red Hat package)
rubygem-google-cloud-errors (Red Hat package)
rubygem-thor (Red Hat package)
python-drf-access-policy (Red Hat package)
python-xlwt (Red Hat package)
rubygem-gssapi (Red Hat package)
python-aiosignal (Red Hat package)
rubygem-rack-jsonp (Red Hat package)
rubygem-clamp (Red Hat package)
python-frozenlist (Red Hat package)
rubygem-jgrep (Red Hat package)
python-parsley (Red Hat package)
rubygem-fog-kubevirt (Red Hat package)
rubygem-googleapis-common-protos (Red Hat package)
rubygem-hocon (Red Hat package)
rubygem-raabro (Red Hat package)
rubygem-googleapis-common-protos-types (Red Hat package)
rubygem-daemons (Red Hat package)
python-odfpy (Red Hat package)
rubygem-apipie-rails (Red Hat package)
python-pyjwkest (Red Hat package)
python-url-normalize (Red Hat package)
rubygem-sqlite3 (Red Hat package)
receptor (Red Hat package)
rubygem-stomp (Red Hat package)
rubygem-safemode (Red Hat package)
rubygem-ansi (Red Hat package)
python-aiohttp-xmlrpc (Red Hat package)
rubygem-pg (Red Hat package)
rubygem-google-cloud-env (Red Hat package)
rubygem-amazing_print (Red Hat package)
rubygem-google-cloud-core (Red Hat package)
rubygem-rails-html-sanitizer (Red Hat package)
rubygem-smart_proxy_discovery_image (Red Hat package)
python-jq (Red Hat package)
rubygem-puma-status (Red Hat package)
dynflow-utils (Red Hat package)
rubygem-http-accept (Red Hat package)
rubygem-activerecord-import (Red Hat package)
python-distro (Red Hat package)
rubygem-google-cloud-compute-v1 (Red Hat package)
ansiblerole-insights-client (Red Hat package)
python-pulp-certguard (Red Hat package)
rubygem-msgpack (Red Hat package)
rubygem-foreman_maintain (Red Hat package)
katello-client-bootstrap (Red Hat package)
cjson (Red Hat package)
rubygem-rchardet (Red Hat package)
rubygem-fugit (Red Hat package)
rubygem-webrick (Red Hat package)
python-yarl (Red Hat package)
rubygem-deface (Red Hat package)
rubygem-dynflow (Red Hat package)
foreman-obsolete-packages (Red Hat package)
rubygem-faraday (Red Hat package)
rubygem-coffee-script-source (Red Hat package)
rubygem-gettext_i18n_rails (Red Hat package)
rubygem-erubi (Red Hat package)
rubygem-graphql (Red Hat package)
python-wrapt (Red Hat package)
rubygem-hammer_cli_katello (Red Hat package)
rubygem-i18n (Red Hat package)
python-markuppy (Red Hat package)
rubygem-multi_json (Red Hat package)
python-pulp-file (Red Hat package)
python-cffi (Red Hat package)
rubygem-nokogiri (Red Hat package)
python-six (Red Hat package)
rubygem-ffi (Red Hat package)
rubygem-css_parser (Red Hat package)
rubygem-git (Red Hat package)
python-opentelemetry_api (Red Hat package)
python-opentelemetry_exporter_otlp_proto_common (Red Hat package)
python-opentelemetry_exporter_otlp (Red Hat package)
python-opentelemetry_sdk (Red Hat package)
python-opentelemetry_proto (Red Hat package)
python-opentelemetry_exporter_otlp_proto_http (Red Hat package)
python-opentelemetry_exporter_otlp_proto_grpc (Red Hat package)
python-rhsm (Red Hat package)
python-urllib3 (Red Hat package)
python3-urllib3
rubygem-parallel (Red Hat package)
python-urllib3
python3.11-urllib3 (Red Hat package)
python3.11-urllib3
python3.12-urllib3 (Red Hat package)
python311-urllib3_1
python3-urllib3-doc
python3x-urllib3 (Red Hat package)
python-productmd (Red Hat package)
rubygem-grpc (Red Hat package)
python-googleapis-common-protos (Red Hat package)
python-grpcio (Red Hat package)
rubygem-sshkey (Red Hat package)
rubygem-snaky_hash (Red Hat package)
pulpcore-selinux (Red Hat package)
rubygem-foreman_google (Red Hat package)
rubygem-powerbar (Red Hat package)
python-urlman (Red Hat package)
python-aioredis (Red Hat package)
python-xlrd (Red Hat package)
rubygem-mustermann (Red Hat package)
rubygem-fog-ovirt (Red Hat package)
rubygem-ovirt_provision_plugin (Red Hat package)
rubygem-tzinfo (Red Hat package)
python311-urllib3
rubygem-net-ping (Red Hat package)
mosquitto (Red Hat package)
rubygem-logging-journald (Red Hat package)
rubygem-rest-client (Red Hat package)
rubygem-highline (Red Hat package)
rubygem-activerecord-session_store (Red Hat package)
rubygem-rack-test (Red Hat package)
rubygem-http-form_data (Red Hat package)
python-charset-normalizer (Red Hat package)
python-markupsafe (Red Hat package)
rubygem-locale (Red Hat package)
python-click-shell (Red Hat package)
rubygem-rails-dom-testing (Red Hat package)
python-backoff (Red Hat package)
ansible-runner (Red Hat package)
python-bracex (Red Hat package)
rubygem-rainbow (Red Hat package)
rubygem-multipart-post (Red Hat package)
rubygem-sinatra (Red Hat package)
rubygem-rack-protection (Red Hat package)
rubygem-rack (Red Hat package)
rubygem-foreman_azure_rm (Red Hat package)
python-daemon (Red Hat package)
rubygem-pulp_ostree_client (Red Hat package)
python-json-stream (Red Hat package)
rubygem-logging (Red Hat package)
rubygem-tilt (Red Hat package)
rubygem-fog-core (Red Hat package)
rubygem-fast_gettext (Red Hat package)
rubygem-connection_pool (Red Hat package)
rubygem-coffee-script (Red Hat package)
rubygem-unicode-display_width (Red Hat package)
python-pyflakes (Red Hat package)
python-pyjwt (Red Hat package)
python-pygtrie (Red Hat package)
rubygem-ruby2ruby (Red Hat package)
rubygem-apipie-dsl (Red Hat package)
rubygem-zeitwerk (Red Hat package)
rubygem-nio4r (Red Hat package)
rubygem-mail (Red Hat package)
rubygem-jwt (Red Hat package)
python-dateutil (Red Hat package)
rubygem-httpclient (Red Hat package)
rubygem-addressable (Red Hat package)
rubygem-execjs (Red Hat package)
python-pycodestyle (Red Hat package)
rubygem-statsd-instrument (Red Hat package)
katello-certs-tools (Red Hat package)
python-semantic-version (Red Hat package)
python-bindep (Red Hat package)
python-pygments (Red Hat package)
rubygem-pulp_container_client (Red Hat package)
python-pulp-container (Red Hat package)
python-pycparser (Red Hat package)
rubygem-loofah (Red Hat package)
python-requests (Red Hat package)
python-oci
ansible-collection-redhat-satellite_operations (Red Hat package)
python-ansible-builder (Red Hat package)
rubygem-infoblox (Red Hat package)
python-pulp_manifest (Red Hat package)
python-aiodns (Red Hat package)
rubygem-optimist (Red Hat package)
rubygem-journald-logger (Red Hat package)
rubygem-smart_proxy_container_gateway (Red Hat package)
python-django-import-export (Red Hat package)
python-openpyxl (Red Hat package)
rubygem-responders (Red Hat package)
python-pyparsing (Red Hat package)
rubygem-retriable (Red Hat package)
python-jinja2 (Red Hat package)
python-psycopg (Red Hat package)
python-dynaconf (Red Hat package)
rubygem-bcrypt (Red Hat package)
python-gitpython (Red Hat package)
rubygem-roadie-rails (Red Hat package)
rubygem-representable (Red Hat package)
rubygem-deep_cloneable (Red Hat package)
rubygem-pulp_deb_client (Red Hat package)
python-pulp-deb (Red Hat package)
rubygem-foreman_webhooks (Red Hat package)
rubygem-builder (Red Hat package)
rubygem-smart_proxy_pulp (Red Hat package)
rubygem-http (Red Hat package)
python-tablib (Red Hat package)
python-django-guid (Red Hat package)
rubygem-will_paginate (Red Hat package)
python-bleach (Red Hat package)
python-types-cryptography (Red Hat package)
python-markdown (Red Hat package)
rubygem-diffy (Red Hat package)
rubygem-sprockets-rails (Red Hat package)
rubygem-mime-types (Red Hat package)
rubygem-smart_proxy_ansible (Red Hat package)
python-asgiref (Red Hat package)
satellite-clone (Red Hat package)
rubygem-fog-vsphere (Red Hat package)
rubygem-rbvmomi2 (Red Hat package)
python-aiohttp (Red Hat package)
rubygem-pulp_python_client (Red Hat package)
rubygem-hammer_cli (Red Hat package)
rubygem-hammer_cli_foreman (Red Hat package)
foreman-selinux (Red Hat package)
foreman-proxy (Red Hat package)
foreman (Red Hat package)
foreman-installer (Red Hat package)
python-djangorestframework (Red Hat package)
python-pycryptodomex (Red Hat package)
python-zipp (Red Hat package)
rubygem-ruby_parser (Red Hat package)
rubygem-fog-aws (Red Hat package)
rubygem-google-protobuf (Red Hat package)
rubygem-pulp_rpm_client (Red Hat package)
python-pulp-rpm (Red Hat package)
python3x-pulpcore (Red Hat package)
python-pulpcore (Red Hat package)
oci-cli
rubygem-pulp_file_client (Red Hat package)
rubygem-pulp_certguard_client (Red Hat package)
rubygem-pulpcore_client (Red Hat package)
rubygem-mime-types-data (Red Hat package)
rubygem-net-scp (Red Hat package)
rubygem-rbnacl (Red Hat package)
python-async-timeout (Red Hat package)
python-gitdb (Red Hat package)
foreman-discovery-image (Red Hat package)
python-uritemplate (Red Hat package)
resource-agents (Red Hat package)
python-pycares (Red Hat package)
rubygem-scoped_search (Red Hat package)
ansible-collection-redhat-satellite (Red Hat package)
rubygem-sprockets (Red Hat package)
fence-agents (Red Hat package)
rubygem-prometheus-client (Red Hat package)
python3x-django (Red Hat package)
python-django (Red Hat package)
rubygem-ancestry (Red Hat package)
python-redis (Red Hat package)
candlepin (Red Hat package)
rubygem-redis (Red Hat package)
automation-controller (Red Hat package)
rubygem-ovirt-engine-sdk (Red Hat package)
rubygem-facter (Red Hat package)
python-typing-extensions (Red Hat package)
python-pexpect (Red Hat package)
resource-agents
resource-agents-gcp
resource-agents-aliyun
resource-agents-paf
python-lxml (Red Hat package)
fence-agents-ipmilan
fence-virtd-tcp
fence-agents-kubevirt
fence-agents-brocade
ha-cloud-support
fence-agents-amt-ws
fence-agents-kdump
fence-agents-eps
fence-agents-drac5
fence-agents-apc
fence-agents-ilo2
fence-agents-apc-snmp
fence-agents-bladecenter
fence-agents-intelmodular
fence-agents-ipdu
fence-agents-ilo-ssh
fence-agents-heuristics-ping
fence-agents-lpar
fence-agents-wti
fence-agents-mpath
fence-agents-all
fence-agents-vmware-soap
fence-agents-vmware-rest
fence-agents-virsh
fence-agents-scsi
fence-agents-cisco-ucs
fence-agents-sbd
fence-agents-rsb
fence-agents-common
fence-agents-cisco-mds
fence-agents-ilo-mp
fence-agents-eaton-snmp
fence-agents-emerson
fence-virtd-cpg
fence-agents-ibm-vpc
fence-agents-ibmblade
fence-virtd-libvirt
fence-virtd-multicast
fence-virtd
fence-agents-rhevm
fence-agents-ibm-powervs
fence-virt
fence-agents-gce
fence-agents-azure-arm
fence-agents-aws
fence-agents-hpblade
fence-agents-aliyun
fence-virtd-serial
fence-agents-redfish
fence-agents-rsa
fence-agents-ifmib
fence-agents-ilo-moonshot
rubygem-kubeclient (Red Hat package)
python-jsonschema (Red Hat package)
katello (Red Hat package)
rubygem-katello (Red Hat package)
rubygem-sexp_processor (Red Hat package)
python-protobuf (Red Hat package)
rubygem-hashie (Red Hat package)
rubygem-coffee-rails (Red Hat package)
python-chardet (Red Hat package)
python-flake8 (Red Hat package)
python-smmap (Red Hat package)
katello-selinux (Red Hat package)
rubygem-public_suffix (Red Hat package)
rubygem-roadie (Red Hat package)
ansible-lint (Red Hat package)
rubygem-friendly_id (Red Hat package)
rubygem-audited (Red Hat package)
python-pbr (Red Hat package)
rubygem-sequel (Red Hat package)
python-whitenoise (Red Hat package)
python-importlib-metadata (Red Hat package)
python-multidict (Red Hat package)
rubygem-actionmailbox (Red Hat package)
rubygem-actioncable (Red Hat package)
rubygem-railties (Red Hat package)
rubygem-actionmailer (Red Hat package)
rubygem-activejob (Red Hat package)
rubygem-actionpack (Red Hat package)
rubygem-rails (Red Hat package)
rubygem-activemodel (Red Hat package)
rubygem-actiontext (Red Hat package)
rubygem-activerecord (Red Hat package)
rubygem-actionview (Red Hat package)
rubygem-activestorage (Red Hat package)
rubygem-activesupport (Red Hat package)
rubygem-puma (Red Hat package)
rubygem-sidekiq (Red Hat package)
rubygem-secure_headers (Red Hat package)
satellite-lifecycle (Red Hat package)
satellite (Red Hat package)
satellite-installer (Red Hat package)
rubygem-foreman_puppet (Red Hat package)
python-tenacity (Red Hat package)
rubygem-rails-i18n (Red Hat package)
rubygem-net-ssh (Red Hat package)
rubygem-kafo (Red Hat package)
python-click (Red Hat package)
python-wcmatch (Red Hat package)
puppetserver (Red Hat package)
puppet-agent (Red Hat package)
rubygem-foreman_openscap (Red Hat package)
rubygem-foreman-tasks (Red Hat package)
puppetlabs-stdlib (Red Hat package)
rubygem-foreman_templates (Red Hat package)
rubygem-foreman_rh_cloud (Red Hat package)
python-pillow (Red Hat package)
rubygem-foreman_remote_execution (Red Hat package)
python-rich (Red Hat package)
rubygem-foreman_theme_satellite (Red Hat package)
rubygem-foreman_ansible (Red Hat package)
python3-pip
python2-pip
python-pip-wheel
python-pip-help
python-pip
rubygem-foreman_bootdisk (Red Hat package)
python-packaging (Red Hat package)
python3.11-packaging (Red Hat package)
python-attrs (Red Hat package)
python-contextlib2 (Red Hat package)
python-gunicorn (Red Hat package)
python3-pip-whl (Ubuntu package)
python-aiofiles (Red Hat package)
python-django-filter (Red Hat package)
rubygem-foreman_discovery (Red Hat package)
python-pyOpenSSL (Red Hat package)
python-cryptography (Red Hat package)
python-pytz (Red Hat package)
python-certifi (Red Hat package)
python-uuid6 (Red Hat package)
venv-salt-minion
python-diff-match-patch (Red Hat package)
foreman-bootloaders-redhat (Red Hat package)
Oracle Communications Cloud Native Core Policy
Oracle Communications Cloud Native Core Service Communication Proxy
Oracle Communications Cloud Native Core Security Edge Protection Proxy
Migration Toolkit for Containers
Splunk Add-on for Cisco Meraki
Red Hat OpenShift Container Platform
watsonx.data
Multicluster Engine for Kubernetes
OpenShift Virtualization
OpenShift Data Foundation (formerly OpenShift Container Storage)
Splunk Add-on for Office 365
Dell EMC Storage Monitoring and Reporting (SMR)
IBM Storage Scale System
Red Hat Single Sign-On

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to Prox-Authorization header is not stripped during cross-origin redirects when using urllib3's proxy support with ProxyManager. A remote attacker can gain obtain proxy credentials used by the library.

Install updates from vendor's website.

• https://github.com/urllib3/urllib3/security/advisories/GHSA-34jh-p97f-mpxf
• https://github.com/urllib3/urllib3/commit/accff72ecc2f6cf5a76d9570198a93ac7c90270e