Lucene search
Veracode Vulnerability DatabaseVERACODE:37477HistoryOct 10, 2022 - 9:11 p.m.
Authorization Bypass
2022-10-1021:11:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.013 Low
EPSS
Percentile
85.6%
modsecurity-crs:sid is vulnerable to authorization bypass. The vulnerability exists due to encoded payload bypass detection, allowing an attacker to cause a specially malicious HTTP Content-Type header field.
References
coreruleset.org/20220919/crs-version-3-3-3-and-3-2-2-covering-several-cves/
lists.debian.org/debian-lts-announce/2023/01/msg00033.html
lists.fedoraproject.org/archives/list/[email protected]/message/HL2L2GF7GOCWPMJZDUE5OXDSXHGG3XUJ/
lists.fedoraproject.org/archives/list/[email protected]/message/PD56EAYNGB6E6QQH62LAYCONOP6OH5DZ/
lists.fedoraproject.org/archives/list/[email protected]/message/YPQ6CCMX3MU4A7MTCGQJA7VMJW3IQDXV/
security-tracker.debian.org/tracker/CVE-2022-39955
security.gentoo.org/glsa/202305-25
Related
ubuntucve
ubuntucve
CVE-2022-39955
2022-09-20 00:00:00
osv
osv
CVE-2022-39955
2022-09-20 07:15:12
modsecurity-crs - security update
2023-01-30 00:00:00
nvd
nvd
CVE-2022-39955
2022-09-20 07:15:12
cve
cve
CVE-2022-39955
2022-09-20 07:15:12
prion
prion
Design/Logic Flaw
2022-09-20 07:15:00
debiancve
debiancve
CVE-2022-39955
2022-09-20 07:15:12
redhatcve
redhatcve
CVE-2022-39955
2022-09-30 17:18:57
cvelist
cvelist
openvas
openvas
Fedora: Security Advisory for mod_security (FEDORA-2022-90708b46e3)
2022-10-16 00:00:00
Fedora: Security Advisory for mod_security (FEDORA-2022-85a85c84b3)
2022-10-16 00:00:00
Fedora: Security Advisory for mod_security_crs (FEDORA-2022-90708b46e3)
2022-10-16 00:00:00
nessus
nessus
RHEL 9 : mod_security_crs (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 8 : mod_security_crs (Unpatched Vulnerability)
2024-06-03 00:00:00
Fedora 35 : mod_security / mod_security_crs (2022-85a85c84b3)
2022-12-23 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: mod_security-2.9.6-1.fc37
2022-11-10 22:40:46
[SECURITY] Fedora 35 Update: mod_security_crs-3.3.4-1.fc35
2022-10-15 21:27:45
[SECURITY] Fedora 35 Update: mod_security-2.9.6-1.fc35
2022-10-15 21:27:45
gentoo
gentoo
OWASP ModSecurity Core Rule Set: Multiple Vulnerabilities
2023-05-21 00:00:00
mageia
mageia
Updated apache-mod_security-crs packages fix security vulnerabilities
2024-03-18 19:12:23
debian
debian
[SECURITY] [DLA 3293-1] modsecurity-crs security update
2023-01-30 18:35:25