CVE-2019-0217

In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid…

published April 8, 2019

CVSS
—
EPSS
17%
Percentile
97.1
In the wild
Unconfirmed
What it is

In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.17434 · 97.1th percentile
Published
2019-04-08T20:11Z
EPSS history
Timeline
  • 08 APR 20:11Z
    In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid…
    cvelistv5