CVEvulnerability

CVE-2010-2068

5.0 MEDIUM Published 2010-06-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-06-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.

Affected configurations

• apache http server 2.2.9 • apache http server 2.2.10 • apache http server 2.2.11 • apache http server 2.2.12 • apache http server 2.2.13 • apache http server 2.2.14 • apache http server 2.2.15 • apache http server 2.3.4 • apache http server 2.3.5

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References