CVE-2020-11985 - AskarLabs CVE Database

CVE-2020-11985

Vendor N/A

Product Apache HTTP Server

Weakness CWE-345

Published August 7, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020.

Key dates

02Disclosure timeline

August 7, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-11985 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/345.html

Related vulnerabilities

04Related CVE

CVE-2025-66255 Unauthenticated Arbitrary File Upload (upgrade_contents.php) CVE-2022-20829 Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability CVE-2022-22567 CVE-2022-22994 Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices. CVE-2024-48916 Ceph is vulnerable to authentication bypass through RadosGW