CVE-2012-4001

 

Published at: - 15-09-2012 12:37

Last modified: - 30-06-2022 05:18

Total changes: - 2

Description

The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• https://developers.google.com/speed/docs/mod_pagespeed/announce-0.10.22.6
• https://developers.google.com/speed/docs/mod_pagespeed/CVE-2012-4001

 

Keywords

NVD

 

CVE-2012-4001

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures