| Package | Affected versions | Patched versions |
|---|---|---|
| http server | = 2.4.1= 2.4.10= 2.4.12= 2.4.16= 2.4.17= 2.4.18= 2.4.2= 2.4.20= 2.4.23= 2.4.25= 2.4.26= 2.4.27= 2.4.28= 2.4.29= 2.4.3= 2.4.4= 2.4.6= 2.4.7= 2.4.9 | |
| jboss core services | = 1.0 |
In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free