Red Hat Security Advisory

RHSA-2025:7419

mod_auth_openidc security update

Released 2025-05-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) mod_auth_openidc-2.4.10-1.el9_6.1

Fixes 1 record

TI-2025-22673 CVE-2025-31492

mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data

MEDIUM 42

mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00592 Published 2025-04-06 Partial fix · 2.4.16.11 CWE-200