CVE ID:	CVE-2010-2787
Description:	api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access restrictions and obtain sensitive information by retrieving documents from an HTTP proxy cache that has been used by a victim.
Test IDs:	1.3.6.1.4.1.25623.1.0.69511   1.3.6.1.4.1.25623.1.0.69542   1.3.6.1.4.1.25623.1.0.69541   1.3.6.1.4.1.25623.1.0.69529   1.3.6.1.4.1.25623.1.0.100733
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2787 42019 http://www.securityfocus.com/bid/42019 FEDORA-2011-5495 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html FEDORA-2011-5807 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html FEDORA-2011-5812 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html FEDORA-2011-5848 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html [mediawiki-announce] 20100728 MediaWiki security release: 1.16.0 and 1.15.5 http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-July/000092.html [oss-security] 20100729 Re: CVE request: mediawiki http://openwall.com/lists/oss-security/2010/07/29/4 http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69776 http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69776 https://bugzilla.redhat.com/show_bug.cgi?id=620224 https://bugzilla.redhat.com/show_bug.cgi?id=620224 https://bugzilla.redhat.com/show_bug.cgi?id=620226 https://bugzilla.redhat.com/show_bug.cgi?id=620226 https://bugzilla.wikimedia.org/show_bug.cgi?id=24565 https://bugzilla.wikimedia.org/show_bug.cgi?id=24565