title: Component version with information disclosure flaw
description: A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions.
problem types: Generation of Error Message Containing Sensitive Information
affected:
{
product: okhttp
vendor: n/a
versions:
version: 4.9.2, status: unaffected
}
{
vendor: Red Hat
product: Red Hat JBoss A-MQ Streams
collectionURL: https://access.redhat.com/downloads/content/package-browser/
defaultStatus: unaffected
packageName: okhttp
cpe: cpe:/a:redhat:amq_streams:2
}
{
vendor: Red Hat
product: Red Hat JBoss A-MQ Streams
collectionURL: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
defaultStatus: unaffected
cpe: cpe:/a:redhat:amq_streams:2
}
metrics:
other: [
content: {'value': 'Moderate', 'namespace': 'https://access.redhat.com/security/updates/classification/'}
type: Red Hat severity rating
]