5

CVE-2010-2068

mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.

Data is provided by the National Vulnerability Database (NVD)
Apache ≫ HTTP Server Version2.2.9
   Ibm ≫ Os2
   Microsoft ≫ Windows
   Novell ≫ Netware
Apache ≫ HTTP Server Version2.2.10
   Ibm ≫ Os2
   Microsoft ≫ Windows
   Novell ≫ Netware
Apache ≫ HTTP Server Version2.2.11
   Ibm ≫ Os2
   Microsoft ≫ Windows
   Novell ≫ Netware
Apache ≫ HTTP Server Version2.2.12
   Ibm ≫ Os2
   Microsoft ≫ Windows
   Novell ≫ Netware
Apache ≫ HTTP Server Version2.2.13
   Ibm ≫ Os2
   Microsoft ≫ Windows
   Novell ≫ Netware
Apache ≫ HTTP Server Version2.2.14
   Ibm ≫ Os2
   Microsoft ≫ Windows
   Novell ≫ Netware
Apache ≫ HTTP Server Version2.2.15
   Ibm ≫ Os2
   Microsoft ≫ Windows
   Novell ≫ Netware
Apache ≫ HTTP Server Version2.3.4 Updatealpha
   Ibm ≫ Os2
   Microsoft ≫ Windows
   Novell ≫ Netware
Apache ≫ HTTP Server Version2.3.5 Updatealpha
   Ibm ≫ Os2
   Microsoft ≫ Windows
   Novell ≫ Netware
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 8.54% 0.92
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.