CVE-2021-32791

🗓️ 26 Jul 2021 17:15:08Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 21 Views

mod_auth_openidc authentication module vulnerability in versions prior to 2.4.

Reporter	Title	Published	Views	Family All 72
Tenable Nessus	Alibaba Cloud Linux 3 : 0135: mod_auth_openidc:2.3 (ALINUX3-SA-2022:0135)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : mod_auth_openidc:2.3 (ALSA-2022:1823)	12 May 202200:00	–	nessus
Tenable Nessus	CentOS 8 : mod_auth_openidc:2.3 (CESA-2022:1823)	10 May 202200:00	–	nessus
Tenable Nessus	CentOS 9 : mod_auth_openidc-2.4.9.1-1.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	Debian dla-3409 : libapache2-mod-auth-openidc - security update	1 May 202300:00	–	nessus
Tenable Nessus	Fedora 39 : mod_auth_openidc (2023-02c84fe305)	7 Nov 202300:00	–	nessus
Tenable Nessus	MiracleLinux 8 : mod_auth_openidc:2.3 (AXSA:2022-3591:01)	20 Jan 202600:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : apache2-mod_auth_openidc (openSUSE-SU-2021:1277-1)	17 Sep 202100:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : apache2-mod_auth_openidc (openSUSE-SU-2021:3020-1)	14 Sep 202100:00	–	nessus
Tenable Nessus	Oracle Linux 8 : mod_auth_openidc:2.3 (ELSA-2022-1823)	18 May 202200:00	–	nessus

NVD

Node

openidc mod_auth_openidcRange<2.4.9

AND

apache http_serverRange2.0.0–2.4.48

Node

fedoraproject fedoraMatch33

OR

fedoraproject fedoraMatch34

Source	Link
oracle	www.oracle.com/security-alerts/cpuapr2022.html
github	www.github.com/zmartzone/mod_auth_openidc/commit/375407c16c61a70b56fdbe13b0d2c8f11398e92c
lists	www.lists.debian.org/debian-lts-announce/2023/04/msg00034.html
github	www.github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-px3c-6x7j-3r9r
github	www.github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXAWKPT5LXZSUTFSJ6IWSZC7RMYYQXQD/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZVF6BSJLRQZ7PFFR4X5JSU6KUJYNOCU/

17 Jun 2026 03:53Current

CVSS 24.3

CVSS 3.15.9

EPSS0.01503

CWE-323 CWE-330

mod_auth_openidc apache 2.x openid connect relying party authentication authorization vulnerability encryption static iv aad aes gcm stream cipher cjose patch