Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cf5c-qxgw-xx3p

Опубликовано: 01 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service (forced re-authentication) via forged Authorization headers when Digest authentication is enabled with AuthDigestNcCheck .

Users are recommended to upgrade to version 2.4.69, which fixes this issue.

Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service (forced re-authentication) via forged Authorization headers when Digest authentication is enabled with AuthDigestNcCheck .

Users are recommended to upgrade to version 2.4.69, which fixes this issue.

EPSS

Процентиль: 47%
0.00565
Низкий

7.5 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 7.5
ubuntu
25 дней назад

Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service (forced re-authentication) via forged Authorization headers when Digest authentication is enabled with AuthDigestNcCheck . Users are recommended to upgrade to version 2.4.69, which fixes this issue.

CVSS3: 3.7
redhat
25 дней назад

Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service (forced re-authentication) via forged Authorization headers when Digest authentication is enabled with AuthDigestNcCheck . Users are recommended to upgrade to version 2.4.69, which fixes this issue.

CVSS3: 7.5
nvd
25 дней назад

Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service (forced re-authentication) via forged Authorization headers when Digest authentication is enabled with AuthDigestNcCheck . Users are recommended to upgrade to version 2.4.69, which fixes this issue.

CVSS3: 7.5
msrc
18 дней назад

Apache HTTP Server: mod_auth_digest reauthentication attack

CVSS3: 7.5
debian
25 дней назад

Missing authentication checks in mod_auth_digest in Apache Software Fo ...

EPSS

Процентиль: 47%
0.00565
Низкий

7.5 High

CVSS3

Дефекты

CWE-306