CVE-2010-1151
Published Apr 20, 2010
Last updated 14 years ago
Overview
- Description
- Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authentication, and read and possibly modify data, via vectors related to improper interaction with an external helper application for validation of credentials.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-362
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apache:apache_http_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "180ABE44-C676-44DC-9461-6B70A055D50D"
}
],
"operator": "OR"
}
]
}
]