Lucene search
ApacheCVELIST:CVE-2022-31813HistoryJun 08, 2022 - 10:00 a.m.
CVE-2022-31813 mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
2022-06-0810:00:57
CWE-348
apache
www.cve.org
1
Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application.
CNA Affected
[
{
"product": "Apache HTTP Server",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThanOrEqual": "2.4.53",
"status": "affected",
"version": "Apache HTTP Server 2.4",
"versionType": "custom"
}
]
}
]References
www.openwall.com/lists/oss-security/2022/06/08/8
httpd.apache.org/security/vulnerabilities_24.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/
security.gentoo.org/glsa/202208-20
security.netapp.com/advisory/ntap-20220624-0005/
Related
alpinelinux
alpinelinux
CVE-2022-31813
2022-06-09 17:15:09
nessus
nessus
Oracle Linux 9 : httpd (ELSA-2022-9680)
2022-08-05 00:00:00
Apache 2.4.x < 2.4.54 Authentication Bypass
2024-04-17 00:00:00
Oracle Linux 7 : httpd (ELSA-2022-9675)
2022-08-04 00:00:00
debiancve
debiancve
CVE-2022-31813
2022-06-09 17:15:09
f5
f5
Apache HTTP Server vulnerability CVE-2022-31813
2022-07-29 18:54:00
nvd
nvd
CVE-2022-31813
2022-06-09 17:15:09
redhatcve
redhatcve
CVE-2022-31813
2022-06-08 20:02:05
oraclelinux
oraclelinux
httpd:2.4 security update
2022-08-10 00:00:00
httpd security update
2022-08-04 00:00:00
httpd security update
2022-08-04 00:00:00
httpd
httpd
ibm
ibm
cnvd
cnvd
Apache HTTP Server Data Forgery Issue Vulnerability (CNVD-2022-73123)
2022-06-10 00:00:00
veracode
veracode
Insecure Access Control
2022-06-14 17:42:39
osv
osv
CVE-2022-31813
2022-06-09 17:15:09
BIT-apache-2022-31813
2024-03-06 10:51:52
apache2 regression
2022-06-23 20:19:44
ubuntucve
ubuntucve
CVE-2022-31813
2022-06-09 00:00:00
prion
prion
Design/Logic Flaw
2022-06-09 17:15:00
cve
cve
CVE-2022-31813
2022-06-09 17:15:09
ics
ics
Mitsubishi Electric MELSOFT iQ AppPortal
2023-02-21 12:00:00
cloudlinux
cloudlinux
Fixed CVEs in httpd: CVE-2022-31813, CVE-2022-28615, CVE-2022-26377
2022-06-28 20:14:01
mageia
mageia
Updated apache packages fix security vulnerability
2022-06-13 23:44:20
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0228)
2022-06-14 00:00:00
Apache HTTP Server < 2.4.54 Multiple Vulnerabilities - Linux
2022-06-10 00:00:00
openSUSE: Security Advisory for apache2 (SUSE-SU-2022:2302-1)
2022-07-07 00:00:00
thn
thn
U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog
2023-02-22 05:38:00
fedora
fedora
[SECURITY] Fedora 36 Update: httpd-2.4.54-3.fc36
2022-07-01 01:09:46
[SECURITY] Fedora 35 Update: httpd-2.4.54-1.fc35
2022-07-06 01:54:10
ubuntu
ubuntu
Apache HTTP Server regression
2022-06-23 00:00:00
Apache HTTP Server regression
2022-06-23 00:00:00
Apache HTTP Server vulnerabilities
2022-06-21 00:00:00
suse
suse
Security update for apache2 (important)
2022-07-06 00:00:00
Security update for apache2 (important)
2022-07-08 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 1:2.4.54-alt1
2022-06-21 00:00:00
Security fix for the ALT Linux 9 package apache2 version 1:2.4.54-alt1
2022-06-19 00:00:00
redos
redos
ROS-20220628-01
2022-06-28 00:00:00
kaspersky
kaspersky
KLA12554 Multiple vulnerabilities in Apache HTTP Server
2022-06-08 00:00:00
slackware
slackware
[slackware-security] httpd
2022-06-08 19:24:07
amazon
amazon
Medium: httpd
2022-07-06 03:12:00
Medium: httpd24
2022-06-30 23:38:00
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2022-06-08 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-0489
2022-06-22 00:00:00
Critical Photon OS Security Update - PHSA-2022-0202
2022-06-22 00:00:00
Critical Photon OS Security Update - PHSA-2022-0409
2022-06-23 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2161
2023-05-03 11:17:19
redhat
redhat
(RHSA-2022:7647) Moderate: httpd:2.4 security update
2022-11-08 06:25:28
(RHSA-2022:8067) Moderate: httpd security, bug fix, and enhancement update
2022-11-15 06:14:59
(RHSA-2022:6753) Moderate: httpd24-httpd security and bug fix update
2022-09-29 13:20:41
rocky
rocky
httpd:2.4 security update
2022-11-08 06:25:28
httpd security, bug fix, and enhancement update
2022-11-15 06:14:59
almalinux
almalinux
Moderate: httpd security, bug fix, and enhancement update
2022-11-15 00:00:00
Moderate: httpd:2.4 security update
2022-11-08 00:00:00
gentoo
gentoo
Apache HTTPD: Multiple Vulnerabilities
2022-08-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00