CVE-2015-3675

The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the mod_hfs_apple module, which allows remote attackers to…

published July 3, 2015

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the mod_hfs_apple module, which allows remote attackers to bypass HTTP authentication via a crafted URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02167 · 82.1th percentile
Published
2015-07-03T01:00Z
EPSS history
Timeline
  • 03 JUL 01:00Z
    The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the mod_hfs_apple module, which allows remote attackers to…
    cvelistv5