VULNERABILITY INTELLIGENCE
CVE-2010-3902
CVSS score5 MEDIUM
EPSS probability2.25%
CISA KEVNot currently listed
Published2010-10-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor