VULNERABILITY INTELLIGENCE

CVE-2001-1556

CVSS score5 MEDIUM
EPSS probability3.56%
CISA KEVNot currently listed
Published2001-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep.

Weakness classification

  • CWE-532: Insertion of Sensitive Information into Log File

Primary references