Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2019-17567
HistoryJun 10, 2021 - 7:15 a.m.

CVE-2019-17567

2021-06-1007:15:07
Google
osv.dev
11
apache http server
mod_proxy_wstunnel
security bypass

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

68.5%

JSON

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP validation, authentication or authorization possibly configured.

References

Related

debiancve 1
openvas 7
nvd 1
cve 1
veracode 1
cbl_mariner 2
prion 1
redhatcve 1
nessus 16
cvelist 1
httpd 1
ubuntucve 2
f5 1
photon 5
ibm 2
debian 1
osv 1
gentoo 1
mageia 1
slackware 1
amazon 3
kaspersky 1
freebsd 1
fedora 2
redhat 2
oracle 1
debiancve
debiancve
CVE-2019-17567
2021-06-10 07:15:07
openvas
openvas
Apache HTTP Server 2.4.6 - 2.4.46 Tunneling Misconfiguration Vulnerability - Linux
2021-06-10 00:00:00
Apache HTTP Server 2.4.6 - 2.4.46 Tunneling Misconfiguration Vulnerability - Windows
2021-06-10 00:00:00
Slackware: Security Advisory (SSA:2021-158-01)
2022-04-21 00:00:00
nvd
nvd
CVE-2019-17567
2021-06-10 07:15:07
cve
cve
CVE-2019-17567
2021-06-10 07:15:07
veracode
veracode
Privilege Escalation
2021-07-11 18:17:25
cbl_mariner
cbl_mariner
CVE-2019-17567 affecting package httpd for versions less than 2.4.52-1
2022-04-09 06:51:57
CVE-2019-17567 affecting package httpd 2.4.46-6
2021-10-15 04:46:31
prion
prion
Authentication flaw
2021-06-10 07:15:00
redhatcve
redhatcve
CVE-2019-17567
2021-06-08 03:49:47
nessus
nessus
CBL Mariner 2.0 Security Update: httpd (CVE-2019-17567)
2023-03-20 00:00:00
RHEL 8 : httpd (Unpatched Vulnerability)
2024-06-03 00:00:00
Photon OS 3.0: Httpd PHSA-2021-3.0-0257
2021-09-09 00:00:00
cvelist
cvelist
CVE-2019-17567 mod_proxy_wstunnel tunneling of non Upgraded connections
2021-06-10 07:10:19
httpd
httpd
Apache Httpd < 2.4.48 : mod_proxy_wstunnel tunneling of non Upgraded connections
2019-10-05 00:00:00
ubuntucve
ubuntucve
CVE-2019-17567
2021-06-10 00:00:00
CVE-2020-13950
2021-06-10 00:00:00
f5
f5
K000133522 : Apache mod_proxy_wstunnel vulnerability CVE-2019-17567
2023-04-14 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2021-0257
2021-06-22 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0365
2021-06-30 00:00:00
Important Photon OS Security Update - PHSA-2021-3.0-0257
2021-06-22 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Apache HTTP Server affect IBM i
2021-09-24 22:34:57
Security Bulletin: IBM Rational Build Forge 8.0.x is affected by Apache HTTP Server version used in it. (CVE-2021-31618, CVE-2020-13950, CVE-2019-17567, CVE-2020-26691, CVE-2021-26690, CVE-2020-13938, CVE-2021-30641, CVE-2020-35452)
2022-01-17 18:35:14
debian
debian
[SECURITY] [DLA 3818-1] apache2 security update
2024-05-25 11:06:45
osv
osv
apache2 - security update
2024-05-24 00:00:00
gentoo
gentoo
Apache: Multiple vulnerabilities
2021-07-17 00:00:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2021-06-16 23:22:25
slackware
slackware
[slackware-security] httpd
2021-06-07 19:07:12
amazon
amazon
Medium: httpd
2021-07-01 00:59:00
Medium: httpd24
2021-07-08 18:38:00
Important: httpd
2021-06-16 20:37:00
kaspersky
kaspersky
KLA12369 Multiple vulnerabilities in Apache HTTP Server
2021-06-01 00:00:00
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2021-06-09 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: httpd-2.4.49-1.fc34
2021-09-20 13:58:04
[SECURITY] Fedora 35 Update: httpd-2.4.49-1.fc35
2021-09-24 20:56:12
redhat
redhat
(RHSA-2021:4614) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP10 security update
2021-11-10 17:10:19
(RHSA-2021:4613) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP10 security update
2021-11-10 17:09:50
oracle
oracle
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

68.5%

JSON
Related for OSV:CVE-2019-17567
debiancve1openvas7nvd1cve1veracode1cbl_mariner2prion1redhatcve1nessus16cvelist1httpd1ubuntucve2f51photon5ibm2debian1osv1gentoo1mageia1slackware1amazon3kaspersky1freebsd1fedora2redhat2oracle1