← Volver a CVEs

CVE-2017-12171

N/A

Descripcion

A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado7/26/2018

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

apache:http_serverredhat:enterprise_linuxredhat:enterprise_linux_desktopredhat:enterprise_linux_serverredhat:enterprise_linux_workstation

Debilidades (CWE)

CWE-284CWE-20

Referencias

http://www.securityfocus.com/bid/101516(secalert@redhat.com)

http://www.securitytracker.com/id/1039633(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2017:2972(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171(secalert@redhat.com)

http://www.securityfocus.com/bid/101516(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1039633(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2017:2972(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.