Unscored CVE-2015-3675 EUVD-2015-3711GHSA-m856-x5c7-2wc2

The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the mod_hfs_apple module, which allows rem…

Published Jul 3, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the mod_hfs_apple module, which allows remote attackers to bypass HTTP authentication via a crafted URL.

References

APPLE-SA-2015-06-30-2 vendor-advisory
75493 vdb-entry
1032760 vdb-entry
http://support.apple.com/kb/HT204942