CVE-2012-2671

CVE-2012-2671 describes a vulnerability in the Rack::Cache rubygem versions 0.3.0 through 1.1, where sensitive HTTP headers like Set-Cookie are improperly cached, affecting the rtomayko rack-cache product. This allows attackers to potentially obtain sensitive cookie information, hijack web sessions, or cause other unspecified impacts by accessing the cache. With a CVSS score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P), it represents a high-severity vulnerability that can be exploited remotely with low complexity and without authentication, leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.