1 matches found
USN-3340-1 apache2 vulnerabilities
Emmanuel Dreyfus discovered that third-party modules using the apgetbasicauthpw function outside of the authentication phase may lead to authentication requirements being bypassed. This update adds a new apgetbasicauthcomponents function for use by third-party modules. CVE-2017-3167 Vasileios...
9.8CVSS6.8AI score0.57472EPSS
SaveExploits4References5
20