Description
In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.
Remediation
References
Related Vulnerabilities
TYPO3 Other Vulnerability (CVE-2006-5069)
Moodle Other Vulnerability (CVE-2010-1616)
WordPress Plugin AdRotate-Ad manager & AdSense Ads SQL Injection (3.9.4)
WordPress Plugin Advanced Custom Fields PRO Arbitrary File Upload (5.12.2)
WordPress Plugin SP Project & Document Manager Unspecified Vulnerability (2.6.2.5)