CVE-2020-11985 PUBLISHED

IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020.

EPSS 15.32% · 94.6th percentile

Risk Scores

EPSS Score
15.32%
94.6th percentile

Affected Products

VendorProductVersions
Bitnamiapache2.4.1
Bitnamiapache2.4.1, 2.4.1, 2.4.1

Timeline

References

Open in Interactive Console →