← Zuruck zu CVEs

CVE-2017-12171

N/A

Beschreibung

A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht7/26/2018

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

apache:http_serverredhat:enterprise_linuxredhat:enterprise_linux_desktopredhat:enterprise_linux_serverredhat:enterprise_linux_workstation

Schwachen (CWE)

CWE-284CWE-20

Referenzen

http://www.securityfocus.com/bid/101516(secalert@redhat.com)

http://www.securitytracker.com/id/1039633(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2017:2972(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171(secalert@redhat.com)

http://www.securityfocus.com/bid/101516(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1039633(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2017:2972(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.