CVE-2019-0215

In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions.

Date published : 2019-04-08

http://www.securityfocus.com/bid/107667

https://security.netapp.com/advisory/ntap-20190423-0001/