CVE-2017-12171CWE-284

A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be…

Medium · published July 26, 2018

CVSS v3.0
6.5
EPSS
8%
Percentile
94.8
In the wild
Unconfirmed
What it is

A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.08078 · 94.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2018-07-26T17:00Z
EPSS history
Timeline
  • 26 JUL 17:00Z
    A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be…
    cvelistv5