---

CVE-2019-0215 - log back

CVE-2019-0215 created at 25 Sep 2019 19:31:40
Severity	+ High
Remote	+ Remote
Type	+ Access restriction bypass
Description	+ In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client supporting Post-Handshake Authentication to bypass configured access control restrictions.
References	+ https://httpd.apache.org/security/vulnerabilities_24.html
Notes