AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-2791

MEDIUM · CVSS 5 EPSS 8.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-08-05 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.0. It affects Apache. It may be remotely exploitable.

CVE
CVE-2010-2791
Severity
MEDIUM
CVSS
5
EPSS
8.28%
Apache

Original NVD Description

mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request. NOTE: this is the same issue as CVE-2010-2068, but for a different OS and set of affected versions.