VULNERABILITY INTELLIGENCE
CVE-2011-4896
CVSS score4.3 MEDIUM
EPSS probability1.50%
CISA KEVNot currently listed
Published2011-12-23
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor