VULNERABILITY INTELLIGENCE

CVE-2007-4099

CVSS score5.8 MEDIUM
EPSS probability1.90%
CISA KEVNot currently listed
Published2007-07-30
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:P

Description

Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain guard nodes to obtain sensitive information and possibly leverage further attacks.

Primary references