Lucene search
Redhat.comRH:CVE-2019-3878HistoryOct 08, 2019 - 5:40 p.m.
CVE-2019-3878
2019-10-0817:40:31
redhat.com
access.redhat.com
8
0.018 Low
EPSS
Percentile
88.1%
A vulnerability was found in mod_auth_mellon. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.
Related
veracode
veracode
Authentication Bypass
2019-05-16 03:38:59
nvd
nvd
CVE-2019-3878
2019-03-26 18:29:00
cve
cve
CVE-2019-3878
2019-03-26 18:29:00
debiancve
debiancve
CVE-2019-3878
2019-03-26 18:29:00
redhat
redhat
(RHSA-2019:0985) Important: mod_auth_mellon security update
2019-05-07 03:40:40
(RHSA-2019:0766) Important: mod_auth_mellon security and bug fix update
2019-04-16 14:08:39
rosalinux
rosalinux
Advisory ROSA-SA-2021-1921
2021-07-02 17:29:52
ubuntucve
ubuntucve
CVE-2019-3878
2019-03-21 00:00:00
prion
prion
Authentication flaw
2019-03-26 18:29:00
oraclelinux
oraclelinux
mod_auth_mellon security update
2019-07-30 00:00:00
mod_auth_mellon security and bug fix update
2019-04-16 00:00:00
mod_auth_mellon security, bug fix, and enhancement update
2019-11-14 00:00:00
cvelist
cvelist
CVE-2019-3878
2019-03-26 17:44:29
nessus
nessus
CentOS 8 : mod_auth_mellon (CESA-2019:0985)
2021-01-29 00:00:00
Oracle Linux 8 : mod_auth_mellon (ELSA-2019-0985)
2019-08-12 00:00:00
RHEL 8 : mod_auth_mellon (RHSA-2019:0985)
2019-05-07 00:00:00
osv
osv
CVE-2019-3878
2019-03-26 18:29:00
libapache2-mod-auth-mellon - security update
2019-03-23 00:00:00
libapache2-mod-auth-mellon vulnerabilities
2020-10-22 12:47:17
openvas
openvas
Fedora Update for mod_auth_mellon FEDORA-2019-db1e9b3002
2019-05-07 00:00:00
Debian: Security Advisory (DSA-4414-1)
2019-03-22 00:00:00
Huawei EulerOS: Security Advisory for mod_auth_mellon (EulerOS-SA-2019-1319)
2020-01-23 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: mod_auth_mellon-0.14.2-1.fc30
2019-04-10 02:48:32
[SECURITY] Fedora 29 Update: mod_auth_mellon-0.14.0-5.fc29
2019-04-02 02:15:25
debian
debian
[SECURITY] [DSA 4414-1] libapache2-mod-auth-mellon security update
2019-03-23 18:33:10
[SECURITY] [DSA 4414-1] libapache2-mod-auth-mellon security update
2019-03-23 18:33:10
amazon
amazon
Important: mod24_auth_mellon
2019-05-02 17:18:00
Important: mod_auth_mellon
2019-05-16 21:50:00
ubuntu
ubuntu
mod_auth_mellon vulnerabilities
2019-03-28 00:00:00
mod_auth_mellon vulnerabilities
2020-10-22 00:00:00
centos
centos
mod_auth_mellon security update
2019-04-16 19:39:45