VULNERABILITY INTELLIGENCE

CVE-2020-11985

CVSS score5.3 MEDIUM
EPSS probability7.05%
CISA KEVNot currently listed
Published2020-08-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020.

Weakness classification

  • security@apache.org: CWE-345
  • nvd@nist.gov: CWE-345

Primary references