CVE-2016-7098
wget: files rejected by access list are kept on the disk for the duration of HTTP connection
Severity
UnknownRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · August 11, 2016
Updated · November 21, 2025
Description
Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open.
Statement
Red Hat Product Security determined that this flaw was not a security vulnerability. See the Bugzilla link for more details.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 2.6AV:N/AC:H/Au:N/C:N/I:P/A:N
CWE not specified