← Voltar para CVEs

CVE-2017-12171

N/A

Descricao

A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado7/26/2018

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

apache:http_serverredhat:enterprise_linuxredhat:enterprise_linux_desktopredhat:enterprise_linux_serverredhat:enterprise_linux_workstation

Fraquezas (CWE)

CWE-284CWE-20

Referencias

http://www.securityfocus.com/bid/101516(secalert@redhat.com)

http://www.securitytracker.com/id/1039633(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2017:2972(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171(secalert@redhat.com)

http://www.securityfocus.com/bid/101516(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1039633(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2017:2972(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.