Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Apache HTTP Server Vulnerability - CVE-2016-5387 - Vulnerability Database
Apache HTTP Server

Apache HTTP Server Vulnerability - CVE-2016-5387

High
Reference: CVE-2016-5387
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-5387
Title: Apache HTTP Server Vulnerability
Overview:

The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable which might allow remote attackers to redirect an application39s outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request aka an quothttpoxyquot issue. NOTE: the vendor states quotThis mitigation has been assigned the identifier CVE-2016-5387quot in other words this is not a CVE ID for a vulnerability.