CVSS 3.0
6.5 mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NCVE-2017-12171
A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource.
Severity
- EPSS
- 8.1% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-284, CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:http_server
- redhat:enterprise_linux
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_server
- redhat:enterprise_linux_workstation