Lucene search

K
httpdApache Team FoundationHTTPD:63EF45ADF0A988085738A692853E5F30
HistoryMar 05, 2009 - 12:00 a.m.

Apache Httpd < 2.2.12 : mod_proxy_ajp information disclosure

2009-03-0500:00:00
Apache Team Foundation
httpd.apache.org
6

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.9%

An information disclosure flaw was found in mod_proxy_ajp in version 2.2.11 only. In certain situations, if a user sent a carefully crafted HTTP request, the server could return a response intended for another user.

CPENameOperatorVersion
apache httpdeq2.2.11

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.9%