CVE-2017-12171

—

CVSS 3.0

6.5 medium

EPSS

8%p94

Published

Jul 26, 2018 (Jul 26, 2018)

Modified

Jun 17, 2026

Description

A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource.

Vendors: redhat apache
Products: enterprise linux, enterprise linux desktop, enterprise linux server, enterprise linux workstation, http server
Weakness: CWE-284, CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (8.1%)

In the news0 stories

No ingested article mentions this CVE yet.