{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-05-15T00:00:00", "descriptions": [{"lang": "en", "value": "OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2011-04-09T09:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "FEDORA-2010-18053", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051637.html"}, {"name": "FEDORA-2010-18055", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051640.html"}, {"name": "FEDORA-2010-18032", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051620.html"}, {"name": "ADV-2010-3078", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2010/3078"}, {"name": "44111", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/44111"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.infradead.org/openconnect.html"}, {"name": "42381", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/42381"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2010-3902", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "FEDORA-2010-18053", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051637.html"}, {"name": "FEDORA-2010-18055", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051640.html"}, {"name": "FEDORA-2010-18032", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051620.html"}, {"name": "ADV-2010-3078", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/3078"}, {"name": "44111", "refsource": "BID", "url": "http://www.securityfocus.com/bid/44111"}, {"name": "http://www.infradead.org/openconnect.html", "refsource": "CONFIRM", "url": "http://www.infradead.org/openconnect.html"}, {"name": "42381", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/42381"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T03:26:11.905Z"}, "title": "CVE Program Container", "references": [{"name": "FEDORA-2010-18053", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051637.html"}, {"name": "FEDORA-2010-18055", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051640.html"}, {"name": "FEDORA-2010-18032", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051620.html"}, {"name": "ADV-2010-3078", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2010/3078"}, {"name": "44111", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/44111"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.infradead.org/openconnect.html"}, {"name": "42381", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/42381"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2010-3902", "datePublished": "2010-10-12T21:00:00", "dateReserved": "2010-10-12T00:00:00", "dateUpdated": "2024-08-07T03:26:11.905Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:infradead:openconnect:*:*:*:*:*:*:*:*", "matchCriteriaId": "0726D7A0-1785-40E5-A0DF-83FB6DA75D77", "versionEndIncluding": "2.25", "vulnerable": true}, {"criteria": "cpe:2.3:a:infradead:openconnect:1.00:*:*:*:*:*:*:*", "matchCriteriaId": "67DF6A41-F66A-4988-8852-08B0F8409185", "vulnerable": true}, {"criteria": "cpe:2.3:a:infradead:openconnect:1.10:*:*:*:*:*:*:*", "matchCriteriaId": "13B5B9C7-3D91-4A40-BEE2-F1BEF2857C4F", "vulnerable": true}, {"criteria": "cpe:2.3:a:infradead:openconnect:1.20:*:*:*:*:*:*:*", "matchCriteriaId": "DFF4C32E-4053-4968-B2E7-C821908B3017", "vulnerable": true}, {"criteria": "cpe:2.3:a:infradead:openconnect:1.30:*:*:*:*:*:*:*", "matchCriteriaId": "92A36920-3A90-4369-A8F4-515C423BE938", "vulnerable": true}, {"criteria": "cpe:2.3:a:infradead:openconnect:2.22:*:*:*:*:*:*:*", "matchCriteriaId": "D3192A04-7811-4688-BF1E-4B6FA91D83D5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list."}, {"lang": "es", "value": "OpenConnect anterior v2.26 coloca el valor de la cookie WebVPN en la salida de depuraci\u00f3n,lo que puede permitir a atacantes remotos obtener informaci\u00f3n sensible por lectura de esta salida, como qued\u00f3 demotrados en la salida posteada en la lista p\u00fablica de correo openconnect-devel. \r\n\r\n"}], "id": "CVE-2010-3902", "lastModified": "2011-04-09T03:29:50.243", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2010-10-14T05:58:42.927", "references": [{"source": "cve@mitre.org", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051620.html"}, {"source": "cve@mitre.org", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051637.html"}, {"source": "cve@mitre.org", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051640.html"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/42381"}, {"source": "cve@mitre.org", "url": "http://www.infradead.org/openconnect.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/44111"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2010/3078"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}