Red Hat Security Advisory

RHSA-2016:1625

Red Hat JBoss Core Services Apache HTTP 2.4.6 Service Pack 1 security update

Released 2016-08-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Core Services

Fixes 1 record

TI-2016-04666 CVE-2016-5387 · GHSA-9hqr-6p2v-pfp2

The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does…

HIGH 68

The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remot…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.55724 Published 2016-07-19 Partial fix