| Package | Affected versions | Patched versions |
|---|---|---|
| http server | = 2.4.37= 2.4.38 |
In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free