CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 10.0. Its EPSS score suggests a 30.6% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2005-2700
Severity
HIGH
CVSS
10
EPSS
30.58%
Original NVD Description
ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClient require" in a per-location context, which allows remote attackers to bypass intended access restrictions.