Implementation of split-header in HMR (Doc ID 2417234.1)

Last updated on APRIL 17, 2024

Applies to:

Goal

Issue : - HMR is not handling the History-info header properly.

history-info contained two URI's for example:

History-Info: "<NAME>"<sip:+abcdefghihjk@yyy.qqq.www.com;user=phone?Reason=SIP;text="Moved Temporarily";cause=302,Diversion;text="unconditional">;index=1;user-id="15555551212@example.xxx.com",<sip:+ncencejncej@yyy.qqq.www.com;user=phone;cause=302>;index=1.1

The following HMR was used to convert the ips/uri-host to the SIP interface ip-address.

Since the history-info contained two URI as above, the 2nd URI was not converted and it was passed as such and hence exposing the IP from the trusted side to the un-trusted.

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.