Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c4hv-94wj-93p7

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.

mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.

EPSS

Процентиль: 32%
0.00124
Низкий

Связанные уязвимости

ubuntu
больше 11 лет назад

mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.

redhat
больше 11 лет назад

mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.

nvd
больше 11 лет назад

mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.

debian
больше 11 лет назад

mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the ...

suse-cvrf
около 11 лет назад

Recommended update for apache2-mod_nss

EPSS

Процентиль: 32%
0.00124
Низкий