CVE-2017-12171
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-12171
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
访问控制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Red Hat Enterprise Linux 访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat Enterprise Linux是美国红帽（Red Hat）公司的面向企业用户的Linux操作系统 Red Hat Enterprise Linux 6.9版本，配置行中的注释无法正确解析，可能无意中允许任何客户端访问受限的HTTP资源。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2017-12171
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-12171
请登录查看更多情报信息。
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2017-12171
Same Patch Batch · Red Hat · 2018-07-26 · 11 CVEs total
| CVE-2017-7530 | Red Hat CloudForms Management Engine 权限许可和访问控制漏洞 | |
| CVE-2016-8647 | Red Hat Ansible 输入验证错误漏洞 | |
| CVE-2017-2664 | Red Hat CloudForms Management Engine 权限许可和访问控制漏洞 | |
| CVE-2017-7543 | openstack-neutron 竞争条件漏洞 | |
| CVE-2017-2589 | Hawtio servlet 安全漏洞 | |
| CVE-2017-7538 | Red Hat Satellite 跨站脚本漏洞 | |
| CVE-2017-7509 | Red Hat Certificate Server 输入验证漏洞 | |
| CVE-2017-12167 | Red Hat JBoss Enterprise Application Platform 信息泄露漏洞 | |
| CVE-2017-12175 | Red Hat Satellite 跨站脚本漏洞 | |
| CVE-2017-2582 | Red Hat Picketlink和KeyCloak 信息泄露漏洞 |
IV. Related Vulnerabilities
Same product: httpd
Same vendor: Red Hat
- CVE-2026-42011
Gnutls: gnutls: security bypass due to incorrect name constr - CVE-2026-42010
Gnutls: gnutls: authentication bypass via nul character in u - CVE-2026-6420
Keylime: keylime: security bypass due to hardcoded tpm quote - CVE-2026-34956
Openvswitch: open vswitch: denial of service via malformed f - CVE-2026-34002
Xorg: xwayland: x.org x server: information disclosure or de
Same weakness: CWE-284
- CVE-2026-8233
Dotouch XproUPF access control - CVE-2026-42569
phpvms: /importer authorization bypass causing full database - CVE-2026-42205
Avo: Broken Access Control: Unauthorized Execution of Arbitr - CVE-2026-41487
Langfuse: Improper role-based-access control in Langfuse LLM - CVE-2026-42278
UltraDAG: Smart Account Spending Policy Bypass via Pockets
V. Comments for CVE-2017-12171
No comments yet