CVE-2015-1130 PUBLISHED KEV CVSS 7.199999809265137 HIGH

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."

EPSS 21.06% · 95.6th percentile

Risk Scores

CVSS v2.0
7.199999809265137
EPSS Score
21.06%
95.6th percentile

Affected Products

VendorProductVersions
applemac_os_x0, 0, 0
n/an/an/a, n/a

Timeline

References

…and 34 more

Open in Interactive Console →