CVE-2020-11985

🗓️ 07 Aug 2020 15:36:31Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 1541 Views

CVE-2020-11985 IP address spoofing when proxying using mod_remoteip and mod_rewrit

Reporter	Title	Published	Views	Family All 50
IBM Security Bulletins	Security Bulletin: Vulnerability in the IBM HTTP Server used by IBM WebSphere Application Server in IBM Cloud (CVE-2020-11985)	2 Sep 202020:39	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2020-11985)	8 Sep 202013:55	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Build Forge security advisory for Apache HTTP Server	27 Oct 202020:56	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server used by IBM Rational ClearQuest (CVE-2020-11985)	26 Oct 202014:45	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache HTTP Server affect IBM i	9 Sep 202014:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in the IBM HTTP Server used by WebSphere Application Server is fixed in 9.0.0.3	31 Aug 202017:58	–	ibm
Tenable Nessus	Apache 2.4.x < 2.4.25 Multiple Vulnerabilities (httpoxy)	12 Jan 201700:00	–	nessus
Tenable Nessus	Fedora 31 : httpd (2020-0d3d3f5072)	4 Sep 202000:00	–	nessus
Tenable Nessus	Fedora 32 : httpd (2020-189a1e6c3e)	1 Sep 202000:00	–	nessus

NVD

Vulners

Node

apache http_serverRange2.4.1–2.4.23

[
  {
    "product": "Apache HTTP Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.4.1 to 2.4.23"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYVYE2ZERFXDV6RMKK3I5SDSDQLPSEIQ/
security	www.security.netapp.com/advisory/ntap-20200827-0002/
lists	www.lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
lists	www.lists.apache.org/thread.html/r09bb998baee74a2c316446bd1a41ae7f8d7049d09d9ff991471e8775%40%3Ccvs.httpd.apache.org%3E
lists	www.lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E
lists	www.lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
lists	www.lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E
oracle	www.oracle.com/security-alerts/cpujan2021.html
lists	www.lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E
lists	www.lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E

17 Jun 2026 02:51Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

CVSS 3.15.3

EPSS0.06091

CWE-345