Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:24141
HistoryApr 10, 2020 - 12:47 a.m.

Information Disclosure

2020-04-1000:47:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

httpd is vulnerable to information disclosure. A flaw was discovered in the way the mod_proxy module of the Apache HTTP Server handled the timeouts of requests forwarded by a reverse proxy to the back-end server. If the proxy was configured to reuse existing back-end connections, it could return a response intended for another user under certain timeout conditions, possibly leading to information disclosure.

References

Related

openvas 11
httpd 1
nessus 9
securityvulns 3
cve 1
oraclelinux 1
seebug 1
f5 2
prion 1
redhat 1
centos 1
ubuntucve 1
debiancve 1
gentoo 1
oracle 1
openvas
openvas
Apache 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability
2010-10-19 00:00:00
Apache HTTP Server 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability
2010-10-19 00:00:00
Oracle: Security Advisory (ELSA-2010-0659)
2015-10-06 00:00:00
httpd
httpd
Apache Httpd < 2.2.10 : Timeout detection flaw (mod_proxy_http)
2010-07-23 00:00:00
nessus
nessus
F5 Networks BIG-IP : Apache HTTPD vulnerability (K23332326)
2015-12-30 00:00:00
Apache < 2.2.10 Multiple Vulnerabilities
2008-10-21 00:00:00
Scientific Linux Security Update : httpd on SL5.x i386/x86_64
2012-08-01 00:00:00
securityvulns
securityvulns
Apache mod_proxy_http information leak
2010-08-19 00:00:00
[ MDVSA-2010:153 ] apache
2010-08-19 00:00:00
Oracle / Sun / MySQL / PeopleSoft multiple applications security vulnerabilities
2013-05-04 00:00:00
cve
cve
CVE-2010-2791
2010-08-05 18:17:00
oraclelinux
oraclelinux
httpd security and bug fix update
2010-08-30 00:00:00
seebug
seebug
Unix平台Apache mod_proxy_http模块超时处理信息泄露漏洞
2010-08-03 00:00:00
f5
f5
K23332326 : Apache HTTPD vulnerability CVE-2010-2791
2015-12-29 00:00:00
SOL23332326 - Apache HTTPD vulnerability CVE-2010-2791
2015-12-29 00:00:00
prion
prion
Design/Logic Flaw
2010-08-05 18:17:00
redhat
redhat
(RHSA-2010:0659) Moderate: httpd security and bug fix update
2010-08-30 00:00:00
centos
centos
httpd, mod_ssl security update
2010-08-31 21:00:21
ubuntucve
ubuntucve
CVE-2010-2791
2010-08-05 00:00:00
debiancve
debiancve
CVE-2010-2791
2010-08-05 18:17:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2012-06-24 00:00:00
oracle
oracle
Oracle Critical Patch Update - April 2013
2013-04-16 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON
Related for VERACODE:24141
openvas11httpd1nessus9securityvulns3cve1oraclelinux1seebug1f52prion1redhat1centos1ubuntucve1debiancve1gentoo1oracle1