CVE-2018-11469

CVE-2018-11469 describes an information disclosure vulnerability in HAProxy versions 1.8.0 through 1.8.9 when caching is enabled. The flaw stems from incorrect caching of responses to requests containing an Authorization header, allowing unauthenticated attackers to potentially access sensitive information. Rated as Medium severity with a CVSS score of 5.9, this vulnerability has a network attack vector and high attack complexity, but does not require user interaction or privileges. The primary impact is a high risk of confidentiality compromise. Currently, there is no evidence of active exploitation, nor are there publicly available exploit tools like Metasploit or Nuclei modules. The vulnerability has received minimal community discussion and media coverage, suggesting low public awareness.