CVE-2020-11985

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.24

Description The issue is related to the implementation of mod remoteip and mod rewrite modules in the Apache HTTP Server, which is associated with insufficient authentication data verification. This can allow a remote attacker to spoof their IP address for logging and PHP scripts when using proxying with mod remoteip and certain mod rewrite rules.

Recommendations For versions prior to 2.4.24, update to Apache HTTP Server 2.4.24 or later to resolve the issue. As a temporary workaround, consider restricting the use of mod remoteip and mod rewrite modules until the update is applied.