Vulnerabilities > CVE-2013-4090 - Unspecified vulnerability in Varnish Cache Project Varnish Cache

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

varnish-cache-project

NVD

Published: 2020-02-12

Updated: 2022-08-02

Summary

Varnish HTTP cache before 3.0.4: ACL bug

Vulnerable Configurations

Part	Description	Count
Application	Varnish_Cache_Project Varnish Cache Project Varnish Cache - Varnish Cache Project Varnish Cache 0.9 Varnish Cache Project Varnish Cache 0.9.1 Varnish Cache Project Varnish Cache 1.0 Varnish Cache Project Varnish Cache 1.0.1 Varnish Cache Project Varnish Cache 1.0.2 Varnish Cache Project Varnish Cache 1.0.3 Varnish Cache Project Varnish Cache 1.0.4 Varnish Cache Project Varnish Cache 1.1 Varnish Cache Project Varnish Cache 1.1.1 Varnish Cache Project Varnish Cache 1.1.2 Varnish Cache Project Varnish Cache 2.0 Varnish Cache Project Varnish Cache 2.0.1 Varnish Cache Project Varnish Cache 2.0.2 Varnish Cache Project Varnish Cache 2.0.3 Varnish Cache Project Varnish Cache 2.0.4 Varnish Cache Project Varnish Cache 2.0.5 Varnish Cache Project Varnish Cache 2.0.6 Varnish Cache Project Varnish Cache 2.1.0 Varnish Cache Project Varnish Cache 2.1.1 Varnish Cache Project Varnish Cache 2.1.2 Varnish Cache Project Varnish Cache 2.1.3 Varnish Cache Project Varnish Cache 2.1.4 Varnish Cache Project Varnish Cache 2.1.5 Varnish Cache Project Varnish Cache 3.0.0 Varnish Cache Project Varnish Cache 3.0.1 Varnish Cache Project Varnish Cache 3.0.2 Varnish Cache Project Varnish Cache 3.0.3	38

References

https://www.varnish-cache.org/lists/pipermail/varnish-announce/2013-June/000684.html

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.