IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rew

Summary

IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020.

Timeline

1. Aug 7, 2020, 3:36 PM UTCCVE published
2. Aug 4, 2024, 11:48 AM UTCRecord last updated

Affected versions

• n/a Apache HTTP Server

  2.4.1 to 2.4.23

References 16