← voltar
CVE-2010-3902

CVE-2010-3902

EPSS 2.3%
OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051620.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-November/051637.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-November/051640.htmlhttp://secunia.com/advisories/42381http://www.infradead.org/openconnect.htmlhttp://www.securityfocus.com/bid/44111http://www.vupen.com/english/advisories/2010/3078