Apache HTTP Server 数据伪造问题漏洞

🗓️ 08 Jun 2022 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 5 Views

Apache HTTP Server data forgery via mod_proxy X-Forwarded-For bypasses IP-based authentication.

Reporter	Title	Published	Views	Family All 219
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by IBM WebSphere Application Server	25 Jul 202215:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use Mapping Assistance may be vulnerable to CVE-2022-29404, CVE-2022-30522, CVE-2022-30556 and CVE-2022-31813	7 Nov 202211:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager.	26 Sep 202218:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Faspex 4.4.2 PL2 has addressed multiple vulnerabilities (CVE-2022-28330, CVE-2023-22868, CVE-2022-30556, CVE-2022-31813, CVE-2022-30522, CVE-2022-47986, CVE-2022-28615, CVE-2022-26377, CVE-2018-25032, CVE-2022-2068)	12 Nov 202402:31	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SiteProtector System is affected by multiple Apache HTTP Server Vulnerabilities	8 Aug 202208:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses "Apache httpd 2.4" which is vulnerable to multiple CVEs	21 Mar 202506:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to bypass security restrictions and obtain sensitive information due to multiple vulnerabilities.	28 Jul 202217:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Cloud Pak System.	9 Oct 202417:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server and IBM HTTP Server used by WebSphere Application Server	30 Dec 202217:31	–	ibm

Source	Link
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/
security	www.security.gentoo.org/glsa/202208-20
openwall	www.openwall.com/lists/oss-security/2022/06/08/8
security	www.security.netapp.com/advisory/ntap-20220624-0005/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/
auscert	www.auscert.org.au/bulletins/ESB-2022.2865
vigilance	www.vigilance.fr/vulnerability/Apache-
cxsecurity	www.cxsecurity.com/cveshow/CVE-2022-31813/
packetstormsecurity	www.packetstormsecurity.com/files/167584/Ubuntu-Security-Notice-USN-5487-3.html
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022070730

23 May 2026 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 27.5

CVSS 3.19.8

EPSS0.00047

data forgery mod proxy x forwarded for ip based authentication apache http server