NVD

Id
45094  
Name
CVE-2012-3502  
Description
The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apache HTTP Server 2.4.x before 2.4.3 does not properly determine the situations that require closing a back-end connection, which allows remote attackers to obtain sensitive information in opportunistic circumstances by reading a response that was intended for a different client.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-08-22  
Modified Date
2013-04-18  
Seq
2012-3502  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
226228 45094 CVE-2012-3502 http://httpd.apache.org/security/vulnerabilities_24.html  View
226229 45094 CVE-2012-3502 [announce] 20120821 [ANNOUNCEMENT] Apache HTTP Server 2.4.3 Released  View
226230 45094 CVE-2012-3502 http://www.apache.org/dist/httpd/CHANGES_2.4.3  View
226231 45094 CVE-2012-3502 55131  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28131 JVNDB-2012-003838 Apache HTTP Server のプロキシ機能における重要な情報を取得される脆弱性 Apache HTTP Server の下記ファイルに実装されているプロキシ機能は、バックエンドへの接続のクローズを必要とする状況を適切に認識しないため、重要な情報を取得される脆弱性が存在します。 CVE-2012-3502 56740 CVE-2012-3502 45094 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003838.html 2012-08-16 2012-08-24 View