2019-01-30 23:29:00 2019-07-24 01:15:30

In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Oracle Enterprise manager ops center 12.3.3 (not an official CPE) Netapp Storage automation store - (not an official CPE) Netapp Santricity cloud connector - (not an official CPE) Apache Http server 2.4.37 (not an official CPE) Apache Http server 2.4.36 (not an official CPE) Apache Http server 2.4.35 (not an official CPE) Apache Http server 2.4.34 (not an official CPE) Apache Http server 2.4.33 (not an official CPE) Apache Http server 2.4.32 (not an official CPE) Apache Http server 2.4.30 (not an official CPE) Apache Http server 2.4.29 (not an official CPE) Apache Http server 2.4.28 (not an official CPE) Apache Http server 2.4.27 (not an official CPE) Apache Http server 2.4.25 (not an official CPE) Apache Http server 2.4.26 (not an official CPE) Apache Http server 2.4.24 (not an official CPE) Apache Http server 2.4.23 (not an official CPE) Apache Http server 2.4.22 (not an official CPE) Apache Http server 2.4.21 (not an official CPE) Apache Http server 2.4.20 (not an official CPE) Apache Http server 2.4.17 (not an official CPE) Apache Http server 2.4.18 (not an official CPE) Apache Http server 2.4.19 (not an official CPE) Apache Http server 2.4.16 (not an official CPE) Apache Software Foundation Apache HTTP Server 2.4.12 Apache Http server 2.4.14 (not an official CPE) Apache Software Foundation Apache HTTP Server 2.4.10 Apache Software Foundation Apache HTTP Server 2.4.9 Apache Software Foundation Apache HTTP Server 2.4.8 Apache Software Foundation Apache HTTP Server 2.4.7 Apache Software Foundation Apache HTTP Server 2.4.6 Apache Http server 2.4.4 (not an official CPE) Apache Software Foundation Apache HTTP Server 2.4.3 Apache Software Foundation Apache HTTP Server 2.4.2 Apache Software Foundation Apache HTTP Server 2.4.1 Apache Software Foundation Apache HTTP Server 2.4.0