Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2010-2791 - Vulnerability Database
Apache HTTP Server

Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2010-2791

Medium
Reference: CVE-2010-2791
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2010-2791
Title: Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

mod_proxy in httpd in Apache HTTP Server 2.2.9 when running on Unix does not close the backend connection if a timeout occurs when reading a response from a persistent connection which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request. NOTE: this is the same issue as CVE-2010-2068 but for a different OS and set of affected versions.