VDB
GCVE-110-CERTCC-2002-867593
GCVE-110-CERTCC-2002-867593
Advisory Published
The HTTP TRACE method returns the contents of client HTTP requests in the entity-body of the TRACE response. Attackers could leverage this behavior to access sensitive information, such as cookies or authentication data, contained in the HTTP headers of the request.
Risk Scores
certcc-cam
certcc-cam
impact2population15exploitation0widely_known17score_current3.7125ease_of_exploitation15
certcc-vrda
certcc-vrda
d1_impact2d1_population3d1_direct_report1
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.