CVE-2022-31813: mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
A flaw was found in the modproxy module of httpd. The server may remove the X-Forwarded- headers from a request based on the client-side Connection header hop-by-hop mechanism.
Other sources
Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded- headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application.
Apache HTTP Server could allow a remote attacker to bypass security restrictions, caused by the failure to send the X-Forwarded- headers to the origin server based on client side Connection header hop-by-hop mechanism. An attacker could exploit this vulnerability to bypass IP based authentication on the origin server/application.
— IBM
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2022-31813?
CVE-2022-31813 is a vulnerability in the mod_proxy module of Apache HTTP Server that allows a remote attacker to bypass security restrictions.
How can a remote attacker exploit CVE-2022-31813?
A remote attacker can exploit CVE-2022-31813 to bypass IP based authentication.
What is the severity of CVE-2022-31813?
CVE-2022-31813 has a severity rating of critical.
Which versions of Apache HTTP Server are affected by CVE-2022-31813?
Apache HTTP Server versions up to and including 2.4.54 are affected by CVE-2022-31813.
Where can I find more information about CVE-2022-31813?
You can find more information about CVE-2022-31813 at the following references: [Reference 1](https://httpd.apache.org/security/vulnerabilities_24.html), [Reference 2](https://www.openwall.com/lists/oss-security/2022/06/08/8), [Reference 3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2095021).