Lucene search

K
httpdApache Team FoundationHTTPD:B90E2A3B47C473DD04F25ECBDA96D6CE
HistoryJan 15, 2012 - 12:00 a.m.

Apache Httpd < 2.2.22 : error responses can expose cookies

2012-01-1500:00:00
Apache Team Foundation
httpd.apache.org
19

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.74 High

EPSS

Percentile

98.1%

A flaw was found in the default error response for status code 400. This flaw could be used by an attacker to expose “httpOnly” cookies when no custom ErrorDocument is specified.

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.74 High

EPSS

Percentile

98.1%