Apache – CVE-2018-1312


Kayran has detected that the version of Apache httpd being used is vulnerable to reply attacks.
When generating an HTTP Digest authentication challenge, the nonce that was sent in order to prevent reply attacks was not correctly generated using a pseudo-random seed. Also known as CVE-2018-1312.

HTTP requests could be replayed in a cluster of servers using a common Digest authentication configuration.
This can be done across the servers by an attacker without being detected or noticed.


CVSS Version 3.x – 9.8 Critical


To deal with CVE-2018-1312, update the version of Apache httpd to 2.4.33 or higher.




< Return to all Vulnerabilities

Active Directory Hacking

What does Active Directory mean? The Active Directory infrastructure is a critical infrastructure in most organizations, and it forms the backbone of the organization’s computing

Read More »