CyberRota Analysis
AI-GeneratedThe vulnerability allows SoupAuthManager to cache proxy authentication credentials without properly scoping them to the specific proxy authority, leading to potential credential leakage when proxy configurations change. This could expose sensitive authentication information to unauthorized proxies, posing a risk to user privacy and security. Organizations utilizing SoupAuthManager should prioritize addressing this issue to mitigate the risk of credential exposure.
Original NVD Description
SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.