CVE-2009-1191

EPSS 12.0%

發布日:2009/4/23修改日:2026/4/28

描述

mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request.

受影響套件(1)

Debian/apache2from 0, < 2.2.11-4

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2009-1191