CVE-2010-3902
CVE-2010-3902
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list.
EPSS 2.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
openconnect Debian:12
- Affected ranges
- ECOSYSTEM: < 3.02-1
Update to 3.02-1
openconnect Debian:13
- Affected ranges
- ECOSYSTEM: < 3.02-1
Update to 3.02-1
openconnect Debian:14
- Affected ranges
- ECOSYSTEM: < 3.02-1
Update to 3.02-1
Original sources
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051637.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051640.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051620.html
- http://www.vupen.com/english/advisories/2010/3078
- http://www.securityfocus.com/bid/44111
- http://www.infradead.org/openconnect.html
- http://secunia.com/advisories/42381
- https://nvd.nist.gov/vuln/detail/CVE-2010-3902