Lucene search
F5F5:K54358814HistoryNov 28, 2022 - 12:00 a.m.
K54358814 : Apache mod_remoteip vulnerability CVE-2020-11985
2022-11-2800:00:00
my.f5.com
17
apache mod_remoteip
ip address spoofing
cve-2020-11985 fix
Security Advisory Description
IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020. (CVE-2020-11985)
Impact
There is no impact; F5 products are not affected by this vulnerability.
Related
redhatcve
redhatcve
CVE-2020-11985
2020-08-11 20:13:36
veracode
veracode
IP Address Spoofing
2020-08-28 01:26:37
openvas
openvas
Apache HTTP Server 2.4.1 < 2.4.24 IP Spoofing Vulnerability - Windows
2020-08-10 00:00:00
Apache HTTP Server 2.4.1 < 2.4.24 IP Spoofing Vulnerability - Linux
2020-08-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2450-1)
2021-04-19 00:00:00
nvd
nvd
CVE-2020-11985
2020-08-07 16:15:11
cvelist
cvelist
CVE-2020-11985
2020-08-07 15:36:31
ibm
ibm
Security Bulletin: A security vulnerability has been identified in IBM HTTP Server used by IBM Rational ClearQuest (CVE-2020-11985)
2020-10-26 14:45:30
osv
osv
CVE-2020-11985
2020-08-07 16:15:11
BIT-apache-2020-11985
2024-03-06 10:57:47
debiancve
debiancve
CVE-2020-11985
2020-08-07 16:15:11
ubuntucve
ubuntucve
CVE-2020-11985
2020-08-07 00:00:00
prion
prion
Spoofing
2020-08-07 16:15:00
httpd
httpd
cve
cve
CVE-2020-11985
2020-08-07 16:15:11
nessus
nessus
IBM HTTP Server 9.0.0.0 < 9.0.0.3 Spoofing (6324789)
2020-12-10 00:00:00
SUSE SLES12 Security Update : apache2 (SUSE-SU-2020:2450-1)
2020-09-04 00:00:00
Fedora 32 : httpd (2020-189a1e6c3e)
2020-09-01 00:00:00
gentoo
gentoo
Apache: Multiple vulnerabilities
2020-08-08 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: httpd-2.4.46-1.fc32
2020-08-31 15:50:53
[SECURITY] Fedora 31 Update: httpd-2.4.46-1.fc31
2020-09-03 16:27:14
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00