Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache 安全漏洞
Vulnerability Description
Mod_SSL是Apache服务器上的SSL实现，用来为Apache Web服务器提供加密支持。Apache mod_ssl在某些配置下存在问题，远程攻击者可以利用这个漏洞绕过SSLCipherSuite配置命令的限制。当"SSLCipherSuite"指定某一目录或部分位置中配置需要受限的cipher套件，远程用户可以利用这个漏洞使用任何允许的cipher套件访问受限制目录或其他指定位置中的资源。
CVSS Information
N/A
Vulnerability Type
N/A