CVE-2020-11985: Medium severity apache http server vulnerability
IP address spoofing when proxying using modremoteip and modrewrite For configurations using proxying with modremoteip and certain modrewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-11985?
CVE-2020-11985 is a vulnerability that allows IP address spoofing when proxying using mod_remoteip and mod_rewrite in Apache HTTP Server.
What is the severity of CVE-2020-11985?
CVE-2020-11985 has a severity rating of 5.3 (Medium).
How does CVE-2020-11985 affect Apache HTTP Server?
CVE-2020-11985 affects Apache HTTP Server versions between 2.4.1 and 2.4.23.
How can an attacker exploit CVE-2020-11985?
An attacker can exploit CVE-2020-11985 to spoof their IP address for logging and PHP scripts when using proxying with mod_remoteip and certain mod_rewrite rules.
Is there a fix available for CVE-2020-11985?
Yes, CVE-2020-11985 was fixed in Apache HTTP Server version 2.4.24.