CVE-2015-3185

The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior.

List of 276,295 websites affected by CVE-2015-3185

The domain names are hidden due to the sensitivity of the data. Please click on the "Contact us" button above to get more information.

Domain	Country	Rank
******************.com	United States	,**
*****..com	United States	,**
****.com	United States	,**
********.com	United States	,**
.***..**.br	Brazil	,**
*************.com	GB	,**
.**..**.br	Brazil	,**
******.com	France	,**
************..uk	GB	,**
**..com	United States	,**
****.org	United States	,**
**.****************.com	United States	,**
*****.com	United States	,**
********.biz	Japan	,**
*******.net	United States	,**
********.com	United States	,**
****.org	Singapore	,**
*****.*****.in	India	,**
*..com	United States	,**
************.net	Cyprus	,**