CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Apache. Its EPSS score suggests a 15.9% probability of exploitation in the next 30 days.
CVE
CVE-2018-1312
Severity
CRITICAL
CVSS
9.8
EPSS
15.88%
Apache
Original NVD Description
In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection.
Related CVEs
Other vulnerabilities affecting the same vendor(s)