Main
Vulnerability Database
Exploits
ID:626 - Exploit for Padding oracle attack in Apache HTTP Server - CVE-2016-0736
ID:626 - Exploit for Padding oracle attack in Apache HTTP Server - CVE-2016-0736
Published: March 18, 2020
Vulnerability identifier: #VU1800
Vulnerability risk: Low
CVE-ID: CVE-2016-0736
CWE-ID: CWE-696
Exploitation vector: Adjecent network
Vulnerable software:
Apache HTTP Server
Apache HTTP Server
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to obtain potentially sensitive information.
The vulnerability exists due to an error in Apache mod_session_crypto implementation. A remote attacker with ability to intercept traffic can decipher potentially sensitive information or tamper with data.
Successful exploitation may allow an attacker to perform padding oracle attack against vulnerable web server and obtain potentially sensitive information.
The vulnerability exists due to an error in Apache mod_session_crypto implementation. A remote attacker with ability to intercept traffic can decipher potentially sensitive information or tamper with data.
Successful exploitation may allow an attacker to perform padding oracle attack against vulnerable web server and obtain potentially sensitive information.
Remediation
The vulnerability is fixed in Apache HTTP Server 2.4.25.