CVE-2020-11985

IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020.

We have discovered 326,737 live websites that are affected by CVE-2020-11985.

Run a Free Instant Scan



Affected Software

Product  Apache
Category Web Servers
Vulnerable Domains326,737 live websites (13% of Apache install base)
Vulnerable Versions
  • from 2.4.1 through 2.4.23
Vulnerable Versions Count21 versions ( 17% of all versions)


Common Weakness Enumeration

CWE-345 Insufficient Verification of Data Authenticity



Details

  • Published - Aug 7, 2020
  • Updated - Aug 4, 2024

Website Distribution by Country

Number of websites using CVE-2020-11985
United States113,843 websites


Germany24,299 websites
Netherlands19,018 websites
France17,963 websites
Japan17,540 websites
Russia12,410 websites
Italy9,602 websites
Czech Republic8,184 websites
Singapore7,654 websites
China6,853 websites

Website Distribution by TLD

Number of websites using CVE-2020-11985
.com142,250 websites
.de14,879 websites
.nl14,490 websites
.org13,506 websites
.net13,445 websites
.ru10,591 websites
.it8,097 websites
.cz6,640 websites
.fr5,456 websites
.jp4,443 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2020-11985

Top websites that are affected by CVE-2020-11985. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***.****.us United States*,***
******************.com United States*,***
*******.**.com United States*,***
****.com United States*,***
********.com United States*,***
********.in India*,***
*.******.***.***.br Brazil*,***
*************.com GB*,***
*.*****.***.***.br Brazil*,***
******.com France*,***
See full domain list

FAQ

CVE-2020-11985 is Insufficient Verification of Data Authenticity in Apache
A total of 326,737 websites have been identified as vulnerable to CVE-2020-11985, based on global website indexing conducted by WebTechSurvey.
The Apache is affected by the CVE-2020-11985 vulnerability.
Apache versions up to and including 2.4.23 are vulnerable to CVE-2020-11985.

References