Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-2787
HistoryApr 27, 2011 - 12:00 a.m.

CVE-2010-2787

2011-04-2700:00:00
ubuntu.com
ubuntu.com
6

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

77.1%

api.php in MediaWiki before 1.15.5 does not prevent use of public caching
headers for private data, which allows remote attackers to bypass intended
access restrictions and obtain sensitive information by retrieving
documents from an HTTP proxy cache that has been used by a victim.

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

77.1%