← Back to CVEs

CVE-2017-12171

N/A

Description

A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource.

CVE Details

CVSS v3.1 ScoreN/A

Published7/26/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

apache:http_serverredhat:enterprise_linuxredhat:enterprise_linux_desktopredhat:enterprise_linux_serverredhat:enterprise_linux_workstation

Weaknesses (CWE)

CWE-284CWE-20

References

http://www.securityfocus.com/bid/101516(secalert@redhat.com)

http://www.securitytracker.com/id/1039633(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2017:2972(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171(secalert@redhat.com)

http://www.securityfocus.com/bid/101516(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1039633(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2017:2972(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.