https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T14:57:27.413054+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-02433 cnvd-2017-02433 2026-10-27T14:57:27.416771+00:00 cnvd-2017-02433 https://cve.radiocsirt.org/vuln/euvd-2026-73729 EUVD-2026-73729 2026-10-27T14:57:27.416804+00:00 EUVD-2026-73729 https://cve.radiocsirt.org/vuln/fkie_cve-2017-6062 fkie_cve-2017-6062 2026-10-27T14:57:27.416818+00:00

The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.5 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an "OIDCUnAuthAction pass" configuration, which allows remote attackers to bypass authentication via crafted HTTP traffic.

 https://cve.radiocsirt.org/vuln/ghsa-5fhw-rc3x-vmxm GHSA-5fhw-rc3x-vmxm 2026-10-27T14:57:27.416847+00:00

The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.5 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an "OIDCUnAuthAction pass" configuration, which allows remote attackers to bypass authentication via crafted HTTP traffic.

 https://cve.radiocsirt.org/vuln/gsd-2017-6062 gsd-2017-6062 2026-10-27T14:57:27.416864+00:00 gsd-2017-6062 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-6062 UBUNTU-CVE-2017-6062 2026-10-27T14:57:27.416875+00:00

Affected: Ubuntu:16.04:LTS: libapache2-mod-auth-openidc

The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.5 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an "OIDCUnAuthAction pass" configuration, which allows remote attackers to bypass authentication via crafted HTTP traffic.