← volver
CVE-2010-3902

CVE-2010-3902

EPSS 2.3%
OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051620.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-November/051637.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-November/051640.htmlhttp://secunia.com/advisories/42381http://www.infradead.org/openconnect.htmlhttp://www.securityfocus.com/bid/44111http://www.vupen.com/english/advisories/2010/3078