CVE:CVE-2018-1283
CNNVD:CNNVD-201803-940
Apache httpd是美国阿帕奇（Apache）软件基金会的一款专为现代操作系统开发和维护的开源HTTP服务器。
Apache httpd 2.4.0版本至2.4.29版本中的‘mod_session’函数存在安全漏洞，该漏洞源于不正确的安全限制。远程攻击者可通过使用‘Session’包头更改会话数据利用该漏洞访问敏感信息。
solution:Upgrade apache http_server to a higher version than 2.4.29,and avoid the version [2.4.0,2.4.29]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,18.04,and avoid the version 14.04,16.04,17.10,18.04; Upgrade netapp santricity_cloud_connector to a higher version than -; Upgrade netapp storage_automation_store to a higher version than -; Upgrade netapp storagegrid to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,7.4,7.5,7.6,and avoid the version 6.0,7.0,7.4,7.5,7.6