Implementation of split-header in HMR
(Doc ID 2417234.1)
Last updated on OCTOBER 09, 2020
Applies to:Acme Packet 4500 - Version S-Cz7.3.0 and later
Information in this document applies to any platform.
Issue : - HMR is not handling the History-info header properly.
history-info contained two URI's for example:
History-Info: "<NAME>"<sip:+email@example.com;user=phone?Reason=SIP;text="Moved Temporarily";cause=302,Diversion;text="unconditional">;index=1;user-id="firstname.lastname@example.org",<sip:+email@example.com;user=phone;cause=302>;index=1.1
The following HMR was used to convert the ips/uri-host to the SIP interface ip-address.
Since the history-info contained two URI as above, the 2nd URI was not converted and it was passed as such and hence exposing the IP from the trusted side to the un-trusted.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document