Lucene search
Redhat.comRH:CVE-2018-17199HistoryJan 22, 2019 - 9:50 p.m.
CVE-2018-17199
2019-01-2221:50:18
redhat.com
access.redhat.com
20
0.002 Low
EPSS
Percentile
54.8%
In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.
Related
ibm
ibm
cvelist
cvelist
CVE-2018-17199
2019-01-22 00:00:00
prion
prion
Session fixation
2019-01-30 22:29:00
openvas
openvas
Apache HTTP Server < 2.4.38 mod_session_cookie Vulnerability - Windows
2019-02-05 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2019-1113)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2019-1137)
2020-01-23 00:00:00
osv
osv
apache2 - security update
2019-01-29 00:00:00
CVE-2018-17199
2019-01-30 22:29:00
Moderate: httpd:2.4 security, bug fix, and enhancement update
2021-05-18 06:08:34
nessus
nessus
EulerOS Virtualization 2.5.3 : httpd (EulerOS-SA-2019-1271)
2019-04-04 00:00:00
IBM HTTP Server 9.0.0.0 < 9.0.0.11 Security Bypass (869064)
2020-12-10 00:00:00
EulerOS 2.0 SP5 : httpd (EulerOS-SA-2019-1137)
2019-04-02 00:00:00
httpd
httpd
Apache Httpd < 2.4.38 : mod_session_cookie does not respect expiry time
2018-10-08 00:00:00
debiancve
debiancve
CVE-2018-17199
2019-01-30 22:29:00
ubuntucve
ubuntucve
CVE-2018-17199
2019-01-30 00:00:00
cve
cve
CVE-2018-17199
2019-01-30 22:29:00
f5
f5
K54296221 : Apache httpd vulnerability CVE-2018-17199
2019-02-05 00:00:00
nvd
nvd
CVE-2018-17199
2019-01-30 22:29:00
debian
debian
[SECURITY] [DLA 1647-1] apache2 security update
2019-01-29 21:28:38
[SECURITY] [DSA 4422-1] apache2 security update
2019-04-03 09:10:59
[SECURITY] [DSA 4422-1] apache2 security update
2019-04-03 09:10:59
alpinelinux
alpinelinux
CVE-2018-17199
2019-01-30 22:29:00
veracode
veracode
Improper Session Management
2019-11-21 00:17:08
suse
suse
Security update for apache2 (moderate)
2019-03-06 00:00:00
Security update for apache2 (moderate)
2019-03-08 00:00:00
mageia
mageia
Updated apache packages fix security vulnerability
2019-03-15 00:39:55
redhat
redhat
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 1:2.4.38-alt1
2019-01-28 00:00:00
Security fix for the ALT Linux 9 package apache2 version 1:2.4.38-alt1
2019-01-25 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.38-alt1
2019-01-25 00:00:00
freebsd
freebsd
Apache -- vulnerability
2019-01-22 00:00:00
kaspersky
kaspersky
KLA12364 Multiple vulnerabilities in Apache HTTP Server
2019-02-28 00:00:00
oraclelinux
oraclelinux
httpd security, bug fix, and enhancement update
2020-04-06 00:00:00
httpd:2.4 security, bug fix, and enhancement update
2021-05-25 00:00:00
centos
centos
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2020-04-08 18:07:48
amazon
amazon
Important: httpd24
2019-03-06 22:21:00
almalinux
almalinux
Moderate: httpd:2.4 security, bug fix, and enhancement update
2021-05-18 06:08:34
rocky
rocky
httpd:2.4 security, bug fix, and enhancement update
2021-05-18 06:08:34
slackware
slackware
[slackware-security] httpd
2019-01-23 04:41:31
archlinux
archlinux
[ASA-201901-14] apache: multiple issues
2019-01-24 00:00:00
gentoo
gentoo
Apache: Multiple vulnerabilities
2019-03-28 00:00:00
photon
photon
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2019-04-04 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2159
2023-04-25 11:49:15
symantec
symantec
Apache HTTP Server Vulnerabilities Jan 2019 - Apr 2020
2020-06-12 20:41:37
oracle
oracle
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00