CVE-2014-3526 in Wicket
Summary
Apache Wicket before 1.5.12, 6.x before 6.17.0, and 7.x before 7.0.0-M3 might allow remote attackers to obtain sensitive information via vectors involving identifiers for storing page markup for temporary user sessions.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
05/14/2014
Disclosure
10/30/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 108791 | Apache Wicket Session information disclosure | 200 | Not defined | Official fix | CVE-2014-3526 |