DeutschShown in its original language — a full translation is planned for a future version.
Trustwave ModSecurity: Mehrere Schwachstellen
view advisory published 2022-10-09
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Trustwave ModSecurity ausnutzen, um Sicherheitsvorkehrungen zu umgehen und vertrauliche Informationen offenzulegen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-39958US | high7.5OT elevated | — | ||
The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass to sequentially exfiltrate small and undetectable sections of data by repeatedly submitting an HTTP… | ||||
| CVE-2022-39957US | high7.5 | — | ||
The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass. A client can issue an HTTP Accept header field containing an optional "charset" parameter in order… | ||||
| CVE-2022-39956US | critical9.8OT elevated | — | ||
The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass for HTTP multipart requests by submitting a payload that uses a character encoding scheme via the… | ||||
| CVE-2022-39955US | critical9.8OT elevated | — | ||
The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple characte… | ||||
02
references
External citations — patches, advisories, analysis.
- Amazon Linux Security Advisory ALAS2-2023-2098 vom 2023-07-01external
- Amazon Linux Security Advisory ALAS-2023-1763 vom 2023-06-09external
- Amazon Linux Security Advisory ALAS-2023-1772 vom 2023-07-04external
- OWASP Security Advisory vom 2022-10-09external
- Debian Security Advisory DLA-3283 vom 2023-01-26external
- Debian Security Advisory DLA-3293 vom 2023-01-30external
- Debian Security Advisory DLA-4265 vom 2025-08-08external
- Gentoo Linux Security Advisory GLSA-202305-25 vom 2023-05-21external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan