← Back

Mod Auth Shadow

mod_auth_shadow

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Mod Auth Shadow
1Mod Auth Shadow
Apr 16, 2026
Oct 13, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are speci...Show more
The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security restrictions.Show less
1Mod Auth Shadow
1Mod Auth Shadow
Apr 16, 2026
Feb 3, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions.