Description

mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.

Remediation

References

CVE-2003-0987

Related Vulnerabilities

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-47795)

Oracle Application Server Improper Authentication Vulnerability (CVE-2002-0563)

Grafana Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-21703)

Craft CMS Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2019-15929)

PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1868)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2003-0987