CVE-2012-3502

The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apache HTTP Server…

published August 22, 2012

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apache HTTP Server 2.4.x before 2.4.3 does not properly determine the situations that require closing a back-end connection, which allows remote attackers to obtain sensitive information in opportunistic circumstances by reading a response that was intended for a different client.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09632 · 95.5th percentile
Published
2012-08-22T19:00Z
EPSS history
Timeline
  • 22 AUG 19:00Z
    The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apache HTTP Server…
    cvelistv5