CVE-2025-9901

A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be incorrectly reused across different requests, potentially exposing sensitive user information. While the issue is unlikely to affect everyday desktop use, it could result in confidentiality breaches in proxy or multi-user environments.

CVSS v3 5.9 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/security/cve/CVE-2025-9901
https://bugzilla.redhat.com/show_bug.cgi?id=2392790
https://gitlab.gnome.org/GNOME/libsoup/-/issues/453

Configurations

No configuration.

History

18 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Se encontró una falla en el mecanismo de caché de libsoup, SoupCache, donde el encabezado HTTP Vary es ignorado al evaluar respuestas en caché. Este encabezado asegura que las respuestas varíen apropiadamente basándose en encabezados de solicitud como el idioma o la autenticación. Sin esta verificación, el contenido en caché puede ser reutilizado incorrectamente en diferentes solicitudes, exponiendo potencialmente información sensible del usuario. Si bien es poco probable que el problema afecte el uso diario de escritorio, podría resultar en violaciones de confidencialidad en entornos de proxy o multiusuario.

Information

Published : 2025-09-03 13:15

Updated : 2026-10-18 21:10

NVD link : CVE-2025-9901

Mitre link : CVE-2025-9901

CVE.ORG link : CVE-2025-9901

JSON object : View

Products Affected

No product.

CWE

CWE-524

Use of Cache Containing Sensitive Information

{"id": "CVE-2025-9901", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-9901", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-03T13:59:52.942718Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "libsoup3", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:6"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:7"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}]}], "published": "2025-09-03T13:15:50.133", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2025-9901", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392790", "source": "secalert@redhat.com"}, {"url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/453", "source": "secalert@redhat.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-524"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in libsoup\u2019s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be incorrectly reused across different requests, potentially exposing sensitive user information. While the issue is unlikely to affect everyday desktop use, it could result in confidentiality breaches in proxy or multi-user environments."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en el mecanismo de cach\u00e9 de libsoup, SoupCache, donde el encabezado HTTP Vary es ignorado al evaluar respuestas en cach\u00e9. Este encabezado asegura que las respuestas var\u00eden apropiadamente bas\u00e1ndose en encabezados de solicitud como el idioma o la autenticaci\u00f3n. Sin esta verificaci\u00f3n, el contenido en cach\u00e9 puede ser reutilizado incorrectamente en diferentes solicitudes, exponiendo potencialmente informaci\u00f3n sensible del usuario. Si bien es poco probable que el problema afecte el uso diario de escritorio, podr\u00eda resultar en violaciones de confidencialidad en entornos de proxy o multiusuario."}], "lastModified": "2026-10-18T21:10:00.120", "sourceIdentifier": "secalert@redhat.com"}