Description
Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.
Affected products
- cacheflow / cacheos0.0 – 0.0
- cacheflow / cacheos3.1.02 – 3.1.02
- cacheflow / cacheos3.1.03 – 3.1.03
- cacheflow / cacheos3.1.04 – 3.1.04
- cacheflow / cacheos3.1.05 – 3.1.05
- cacheflow / cacheos3.1.06 – 3.1.06
- cacheflow / cacheos3.1.07 – 3.1.07
- cacheflow / cacheos3.1.08 – 3.1.08
- cacheflow / cacheos3.1.09 – 3.1.09
- cacheflow / cacheos3.1.10 – 3.1.10
- cacheflow / cacheos3.1.11 – 3.1.11
- cacheflow / cacheos3.1.12 – 3.1.12
- cacheflow / cacheos3.1.13 – 3.1.13
- cacheflow / cacheos3.1.14 – 3.1.14
- cacheflow / cacheos3.1.15 – 3.1.15
- cacheflow / cacheos3.1.16 – 3.1.16
- cacheflow / cacheos3.1.17 – 3.1.17
- cacheflow / cacheos3.1.18 – 3.1.18
- cacheflow / cacheos3.1.19 – 3.1.19
- cacheflow / cacheos3.1.20 – 3.1.20
- cacheflow / cacheos4.0.11 – 4.0.11
- cacheflow / cacheos4.0.12 – 4.0.12
- cacheflow / cacheos4.0.13 – 4.0.13