← back
CVE-2010-3902

CVE-2010-3902

EPSS 2.3%
OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051620.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-November/051637.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-November/051640.htmlhttp://secunia.com/advisories/42381http://www.infradead.org/openconnect.htmlhttp://www.securityfocus.com/bid/44111http://www.vupen.com/english/advisories/2010/3078