Threats tagged 'ghsa-gh64-76r6-qhpc'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 1.0%	CVE-2025-23048In some mod_ssl configurations on Apache HTTP Server 2.4.35 through to 2.4.63, an access control bypass by trusted Critical9.1EPSS 1.0%2025-07-10GCVE DatabaseCVE-2025-23048 An access control bypass vulnerability exists in certain mod_ssl configurations of Apache HTTP Server versions 2.4.35 through 2.4.63. The issue arises when multiple virtual hosts are configured with different trusted client certificate sets, and SSLStrictSNIVHostCheck is not enabled. This allows a trusted client for one virtual host to potentially access another virtual host via TLS 1.3 session resumption. EPSS 1.0%Report on CVE-2025-23048 Vulnerability CWE-284 #ghsa-gh64-76r6-qhpc	GCVE Database	2025-07-10

Page 1 of 1