CVE Catalog
CVE-2017-3167
CriticalSummary
In Apache httpd versions 2.2.x before 2.2.33 and 2.4.x before 2.4.26, the use of ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed.
Risk Assessment
Organizations may be exposed to unauthorized access, potentially leading to data breaches or other serious security incidents.
Recommendation
It is recommended to update Apache httpd to the latest version to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed.