CVE-2019-0217

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.38 and prior

Description A race condition in the mod auth digest component of the Apache HTTP Server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions. This issue is caused by synchronization errors when using a shared resource. The exploitation of this issue may allow a remote attacker to authenticate using a different username.

Recommendations For Apache HTTP Server versions 2.4.38 and prior, consider disabling the mod auth digest module until a patch is available to prevent potential exploitation. Restrict access to sensitive areas of the server to minimize the risk of unauthorized access.