CVE-2011-4317: An additional exposure was found when using mod_proxy in reverse proxy mode. In certain configurations using RewriteRule with proxy flag or ProxyPassMatch, a remote attacker could cause the reverse proxy to connect to an arbitrary server, possibly disclosing sensitive information from internal web servers not directly accessible to attacker.

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2012-01-22 00:00 UTC
  • Importiert: 2026-10-15 12:54 UTC
  • Quelle-ID: apache_httpd_sec
  • uid_hash: 8116600fafb89c7df54a5a34c91bfd98aeb02d6056aa4d89640fe3dcf5a0c361

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2011-4317

2011-11-30

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Apache HTTP Server Security (httpd.org JSON)

apache_httpd_sec

vendor_advisory webserver, httpd - de https://httpd.apache.org/security/vulnerabilities-httpd.json