CVE-2015-3675

The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the modhfsapple module, which allows remote attackers to bypass HTTP authentication via a crafted URL...

CVE-2015-3675

CVE-2015-3675 affects Apple OS X: the default Apache HTTP Server configuration prior to OS X 10.10.4 does not enable the mod_hfs_apple module, allowing remote attackers to bypass HTTP authentication via a crafted URL. The issue is mitigated by enabling mod_hfs_apple or upgrading to OS X 10.10.4 (...