PT-2026-103940
CVE-2026-73636
·
تاريخ النشر
2026-10-01
·
تاريخ التحديث
2026-11-10
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Apache HTTP Server versions prior to 2.4.69
Description
An authentication bypass exists in the
mod auth digest module. A man-in-the-middle (MITM) attacker can replay captured digest authentication credentials using crafted requests. This occurs when the AuthDigestNonceLifetime variable is set to 0, which can trigger garbage collection of the client's shared memory entry.Recommendations
Upgrade to version 2.4.69.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾