Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Apache HTTP Server Permissions Privileges and Access Controls Vulnerability - CVE-2015-3185 - Vulnerability Database
Apache HTTP Server

Apache HTTP Server Permissions Privileges and Access Controls Vulnerability - CVE-2015-3185

Medium
Reference: CVE-2015-3185
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-3185
Title: Apache HTTP Server Permissions Privileges and Access Controls Vulnerability
Overview:

The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior.