| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.2.0, < 2.2.33≥ 2.4.0, < 2.4.26 | 2.2.332.4.26 |
| secure global desktop | = 5.3 | |
| jboss core services | = 1.0 |
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free