CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-3902

OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.3%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2010-3902

Infradead » Openconnect » Version: 1.00

cpe:2.3:a:infradead:openconnect:1.00
Infradead » Openconnect » Version: 1.10

cpe:2.3:a:infradead:openconnect:1.10
Infradead » Openconnect » Version: 1.20

cpe:2.3:a:infradead:openconnect:1.20
Infradead » Openconnect » Version: 1.30

cpe:2.3:a:infradead:openconnect:1.30
Infradead » Openconnect » Version: 1.40

cpe:2.3:a:infradead:openconnect:1.40
Infradead » Openconnect » Version: 2.00

cpe:2.3:a:infradead:openconnect:2.00
Infradead » Openconnect » Version: 2.01

cpe:2.3:a:infradead:openconnect:2.01
Infradead » Openconnect » Version: 2.10

cpe:2.3:a:infradead:openconnect:2.10
Infradead » Openconnect » Version: 2.11

cpe:2.3:a:infradead:openconnect:2.11
Infradead » Openconnect » Version: 2.12

cpe:2.3:a:infradead:openconnect:2.12
Infradead » Openconnect » Version: 2.20

cpe:2.3:a:infradead:openconnect:2.20
Infradead » Openconnect » Version: 2.21

cpe:2.3:a:infradead:openconnect:2.21
Infradead » Openconnect » Version: 2.22

cpe:2.3:a:infradead:openconnect:2.22
Infradead » Openconnect » Version: 2.23

cpe:2.3:a:infradead:openconnect:2.23
Infradead » Openconnect » Version: 2.24

cpe:2.3:a:infradead:openconnect:2.24
Infradead » Openconnect » Version: 2.25

cpe:2.3:a:infradead:openconnect:2.25

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-3902

Products

Pricing

Contact Us