« 一覧へ戻る

CVE-2018-1312 Critical

公開: 2018-03-26 / 更新: 2026-06-17 / CVSS: 9.8 / 出典: nvd
製品: Apache

外部リンク: NVD

説明 (原文)

In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection.