CVE-2011-1498

CVE-2011-1498 describes an information disclosure vulnerability in Apache HttpClient 4.x prior to version 4.1.1. When configured with an authenticating proxy, the HttpClient incorrectly forwards the Proxy-Authorization header to the origin server, allowing remote web servers to capture sensitive authentication credentials. This vulnerability has a CVSS score of 4.3 (medium severity) due to its network attack vector and medium attack complexity, potentially leading to a partial compromise of confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.