CVE-2016-0736

🗓️ 05 Apr 2020 04:55:54Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 63 Views

httpd mod_session_crypto vulnerability allows remote attackers to decrypt and modify session data

Reporter	Title	Published	Views	Family All 125
0day.today	Apache mod_session_crypto - Padding Oracle Vulnerability	23 Dec 201600:00	–	zdt
IBM Security Bulletins	Security Bulletin: Open Source Apache HTTP Server Vulnerabilities which is used by IBM PureApplication Systems (CVE-2016-0736 CVE-2016-2161 CVE-2016-8743)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilties	19 Dec 201915:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities CVE-2016-0736, CVE-2016-2161 and CVE-2016-8743 in IBM i HTTP Server	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache HTTP Server affect IBM Cognos Business Intelligence	24 Apr 201920:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in HTTPD affect PowerKVM	18 Jun 201801:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller 2019Q2 Security Updater: Multiple vulnerabilities have been identified in IBM Cognos Controller	13 Jun 201919:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in httpd affect Power Hardware Management Console	23 Sep 202101:45	–	ibm
ALT Linux	Security fix for the ALT Linux 8 package apache2 version 1:2.4.25-alt1	18 May 201700:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package apache2 version 1:2.4.25-alt1	18 May 201700:00	–	altlinux

Source	Link
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

02 Apr 2022 09:34Current

1.8Low risk

Vulners AI Score1.8

CVSS 25

CVSS 35.4 - 7.5

EPSS0.4168

cve-2016-0736 httpd mod_session_crypto vulnerability remote attackers decrypt modify session data