CVE-2010-2787

2011-04-2700:55:01

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

77.0%

JSON

api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access restrictions and obtain sensitive information by retrieving documents from an HTTP proxy cache that has been used by a victim.

OSVersionArchitecturePackageVersionFilename
Debian12allmediawiki< 1:1.15.5-1mediawiki_1:1.15.5-1_all.deb
Debian11allmediawiki< 1:1.15.5-1mediawiki_1:1.15.5-1_all.deb
Debian999allmediawiki< 1:1.15.5-1mediawiki_1:1.15.5-1_all.deb
Debian13allmediawiki< 1:1.15.5-1mediawiki_1:1.15.5-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	mediawiki	< 1:1.15.5-1	mediawiki_1:1.15.5-1_all.deb
Debian	11	all	mediawiki	< 1:1.15.5-1	mediawiki_1:1.15.5-1_all.deb
Debian	999	all	mediawiki	< 1:1.15.5-1	mediawiki_1:1.15.5-1_all.deb
Debian	13	all	mediawiki	< 1:1.15.5-1	mediawiki_1:1.15.5-1_all.deb