Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Takashi Sato

#39720de 56,331
7.5CVSS total
Vulnerabilidades · 1
PT-2013-3623
7.5
2013-07-22
Apache · Apache Http Server · CVE-2013-2249
**Name of the Vulnerable Software and Affected Versions** Apache HTTP Server versions prior to 2.4.5 **Description** The issue is related to the mod session dbd module in the Apache HTTP Server, where it proceeds with save operations for a session without considering the `dirty flag` and the requirement for a new session ID. This has an unspecified impact and allows for remote attack vectors. The issue was reported by Takashi Sato. **Recommendations** For Apache HTTP Server versions prior to 2.4.5, update to version 2.4.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the mod session dbd module until a patch is applied.