Lucene search
RedosROS-20240827-01HistoryAug 27, 2024 - 12:00 a.m.
ROS-20240827-01
2024-08-2700:00:00
redos.red-soft.ru
4
vulnerability
mod_wsgi
apache
web server
x-client-ip
header processing
remote attacker
unauthorized access
network services
unix
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.1
Confidence
Low
A vulnerability in the mod_wsgi module of the Apache web server is related to errors in X-Client-IP header processing.
Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to network services.
access to network services
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| redos | 7.3 | x86_64 | python3-mod_wsgi | < 4.6.6-14 | UNKNOWN |
Related
nessus
nessus
SUSE SLES15 Security Update : apache2-mod_wsgi (SUSE-SU-2022:4488-1)
2022-12-15 00:00:00
Debian DLA-3111-1 : mod-wsgi - LTS security update
2022-09-16 00:00:00
EulerOS 2.0 SP8 : mod-wsgi (EulerOS-SA-2023-1328)
2023-02-08 00:00:00
osv
osv
BIT-mod_wsgi-2022-2255
2024-03-06 10:56:14
mod-wsgi - security update
2022-09-15 00:00:00
Incorrect header handling in mod-wsgi
2022-08-26 00:03:30
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0289)
2022-08-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4488-1)
2022-12-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4010-1)
2022-11-17 00:00:00
debiancve
debiancve
CVE-2022-2255
2022-08-25 18:15:09
debian
debian
[SECURITY] [DLA 3111-1] mod-wsgi security update
2022-09-15 21:43:48
cve
cve
CVE-2022-2255
2022-08-25 18:15:09
cbl_mariner
cbl_mariner
CVE-2022-2255 affecting package mod_wsgi for versions less than 4.9.3-2
2022-11-03 22:13:02
prion
prion
Design/Logic Flaw
2022-08-25 18:15:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2363
2024-02-27 09:22:20
ubuntu
ubuntu
mod-wsgi vulnerability
2022-08-04 00:00:00
ubuntucve
ubuntucve
CVE-2022-2255
2022-07-22 00:00:00
mageia
mageia
Updated apache-mod_wsgi packages fix security vulnerability
2022-08-20 13:04:13
redhatcve
redhatcve
CVE-2022-2255
2022-07-18 18:12:01
cvelist
cvelist
CVE-2022-2255
2022-08-25 17:26:19
veracode
veracode
Insecure Access Control
2022-08-26 11:53:58
nvd
nvd
CVE-2022-2255
2022-08-25 18:15:09
github
github
Incorrect header handling in mod-wsgi
2022-08-26 00:03:30
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.1
Confidence
Low
Related for ROS-20240827-01