Vulnerability Database

309,961

Total vulnerabilities in the database

CVE-2015-2330

Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies.

Published: Mar 10, 2017
Updated: Nov 9, 2025
CVE: CVE-2015-2330
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

CWE-295

OWASP TOP 10:

A3 - Sensitive Data Exposure

Affected Software
References

Software	From	Fixed in
webkitgtk / webkitgtk	-	2.6.5.x

http://www.openwall.com/lists/oss-security/2015/03/17/11
http://www.openwall.com/lists/oss-security/2015/03/18/4
https://bugs.webkit.org/show_bug.cgi?id=142244
https://security.gentoo.org/glsa/201706-15
https://trac.webkit.org/changeset/181074
https://webkitgtk.org/security/WSA-2015-0002.html

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo