← Retour aux CVEs

CVE-2017-12171

N/A

Description

A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource.

Details CVE

Score CVSS v3.1N/A

Publie7/26/2018

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

apache:http_serverredhat:enterprise_linuxredhat:enterprise_linux_desktopredhat:enterprise_linux_serverredhat:enterprise_linux_workstation

Faiblesses (CWE)

CWE-284CWE-20

References

http://www.securityfocus.com/bid/101516(secalert@redhat.com)

http://www.securitytracker.com/id/1039633(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2017:2972(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171(secalert@redhat.com)

http://www.securityfocus.com/bid/101516(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1039633(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2017:2972(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.