GCVE-110-CERTCC-2016-877625

Advisory PublishedCVSS 2.9/10

Vulnetix · Advisory published August 4, 2016

Web proxy auto-config (PAC) files are passed the full HTTPS URL in GET requests which may expose sensitive data.

Download JSON Open in Console

Risk Scores

CVSS 2.0

2.9/10

Low · AV:A/AC:M/Au:N/C:P/I:N/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact1d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score2.3remediation_levelOFreport_confidenceCenvironmental_score1.68300400432752target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2016-1801 CVE-2016-5134

References

Proxy auto-config (PAC) files have access to full HTTPS URLs

url

Proxy auto-config (PAC) files have access to full HTTPS URLs

advisory

Proxy auto-config (PAC) files have access to full HTTPS URLs

advisory

Browse GCVE Records

72,148 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON