Read the docs
Red Hat Security Advisory

RHSA-2017:2710

Red Hat JBoss Core Services security update

Released 2017-09-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

Priority HIGH 73

In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_d…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.5677 Published 2017-07-13 Partial fix CWE-20