⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2015-3675

MEDIUM · 5.0 CVSS Gepubliceerd: 03-07-2015 CWE-284

Beschrijving

The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the mod_hfs_apple module, which allows remote attackers to bypass HTTP authentication via a crafted URL.

Vendors

Apple

Affected products

Mac Os X

References

lists.apple.com
support.apple.com
www.securityfocus.com
www.securitytracker.com