The issue allows remote attackers to obtain sensitive information from the "/server-status" page of the Apache HTTP Server. This is because a connection from the Tor onion service, or from PageKite, is considered a local connection. The Apache mod status module must be enabled for this issue to occur.