Skip to content
Fencer Intel
medium 4.3

CVE-2015-3185 json

The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require direc…

published 2015-07-20 11 y ago modified 2026-06-17 4 mo ago also EUVD-2015-3255

cvss
4.3
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
16.3%
EPSS 16.3% chance of exploitation in 30 days, percentile 96%
public exploits
0
none known

Summary

The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior.

Patch / fix

  • apache2 Debian 14, Debian 13, Debian 12 2.4.16-1

debian advisories DEBIAN-CVE-2015-3185

  • apache2 Ubuntu 14.04 LTS 2.4.7-1ubuntu4.5

ubuntu advisories UBUNTU-CVE-2015-3185

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • jbcs-httpd24-httpd jboss core services 1 2.4.23-122.jbcs.el7
  • jbcs-httpd24-mod_ssl jboss core services 1 1:2.4.23-122.jbcs.el7
  • jbcs-httpd24-openssl jboss core services 1 1:1.0.2h-14.jbcs.el7
  • jbcs-httpd24-mod_ldap jboss core services 1 2.4.23-122.jbcs.el7
  • jbcs-httpd24-httpd-libs jboss core services 1 2.4.23-122.jbcs.el7
  • jbcs-httpd24-httpd-tools jboss core services 1 2.4.23-122.jbcs.el7
  • jbcs-httpd24-mod_session jboss core services 1 2.4.23-122.jbcs.el7
  • jbcs-httpd24-httpd-manual jboss core services 1 2.4.23-122.jbcs.el7

red hat advisories RHSA-2017:2709RHSA-2017:2710RHSA-2015:1667RHSA-2015:1666

  • apache2 SLES for SAP 12, SLES 12, SLE Software Development Kit 12 2.4.10-14.10.1
  • apache2-mod_jk SLES for SAP 12, SLES 12 1.2.40-2.6.1
  • apache2-mod_fastcgi Enterprise Storage 1.0 2.4.7-3.4.1
  • apache2-mod_auth_kerb SLES for SAP 12, SLES 12 5.4-2.4.1
  • apache2-mod_security2 SLES for SAP 12, SLES 12 2.8.0-3.4.1

suse advisories SUSE-SU-2015:1851-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2015-3185 updated cvss 3.7

httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4

  • Red Hat JBoss Enterprise Web Server 3 httpd24 httpd24
    affected: no fix available
  • Red Hat Enterprise Linux Client Optional (v. 7) httpd 2.4.6-31.el7_1.1, mod_ssl 2.4.6-31.el7_1.1, mod_ldap 2.4.6-31.el7_1.1, httpd-tools 2.4.6-31.el7_1.1, mod_session 2.4.6-31.el7_1.1, httpd-manual 2.4.6-31.el7_1.1, +1 more Red Hat Enterprise Linux ComputeNode Optional (v. 7) httpd 2.4.6-31.el7_1.1, mod_ssl 2.4.6-31.el7_1.1, mod_ldap 2.4.6-31.el7_1.1, httpd-tools 2.4.6-31.el7_1.1, mod_session 2.4.6-31.el7_1.1, httpd-manual 2.4.6-31.el7_1.1, +1 more Red Hat Enterprise Linux Server (v. 7) httpd 2.4.6-31.el7_1.1, httpd 2.4.6-31.ael7b_1.1, mod_ssl 2.4.6-31.el7_1.1, mod_ssl 2.4.6-31.ael7b_1.1, httpd-tools 2.4.6-31.el7_1.1, httpd-manual 2.4.6-31.el7_1.1, +2 more Red Hat Enterprise Linux Server Optional (v. 7) mod_ldap 2.4.6-31.el7_1.1, mod_ldap 2.4.6-31.ael7b_1.1, mod_session 2.4.6-31.el7_1.1, mod_session 2.4.6-31.ael7b_1.1, mod_proxy_html 2.4.6-31.el7_1.1, mod_proxy_html 2.4.6-31.ael7b_1.1 Red Hat Enterprise Linux Workstation (v. 7) httpd 2.4.6-31.el7_1.1, mod_ssl 2.4.6-31.el7_1.1, httpd-tools 2.4.6-31.el7_1.1, httpd-manual 2.4.6-31.el7_1.1 Red Hat Enterprise Linux Workstation Optional (v. 7) mod_ldap 2.4.6-31.el7_1.1, mod_session 2.4.6-31.el7_1.1, mod_proxy_html 2.4.6-31.el7_1.1
    fixed: vendor fix RHSA-2015:1667
  • Red Hat JBoss Core Services
    fixed: vendor fix RHSA-2016:2957
  • Red Hat JBoss Core Services on RHEL 6 Server jbcs-httpd24-httpd 2.4.23-122.jbcs.el6, jbcs-httpd24-openssl 1.0.2h-14.jbcs.el6, jbcs-httpd24-mod_ssl 2.4.23-122.jbcs.el6, jbcs-httpd24-mod_ldap 2.4.23-122.jbcs.el6, jbcs-httpd24-httpd-libs 2.4.23-122.jbcs.el6, jbcs-httpd24-httpd-tools 2.4.23-122.jbcs.el6, +6 more
    fixed: vendor fix RHSA-2017:2710
  • Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-httpd 2.4.23-122.jbcs.el7, jbcs-httpd24-openssl 1.0.2h-14.jbcs.el7, jbcs-httpd24-mod_ssl 2.4.23-122.jbcs.el7, jbcs-httpd24-mod_ldap 2.4.23-122.jbcs.el7, jbcs-httpd24-httpd-libs 2.4.23-122.jbcs.el7, jbcs-httpd24-httpd-tools 2.4.23-122.jbcs.el7, +6 more
    fixed: vendor fix RHSA-2017:2709
  • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) httpd24-httpd 2.4.12-4.el6.2, httpd24-mod_ssl 2.4.12-4.el6.2, httpd24-mod_ldap 2.4.12-4.el6.2, httpd24-httpd-tools 2.4.12-4.el6.2, httpd24-mod_session 2.4.12-4.el6.2, httpd24-httpd-manual 2.4.12-4.el6.2, +1 more Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) httpd24-httpd 2.4.12-6.el7.1, httpd24-mod_ssl 2.4.12-6.el7.1, httpd24-mod_ldap 2.4.12-6.el7.1, httpd24-httpd-tools 2.4.12-6.el7.1, httpd24-mod_session 2.4.12-6.el7.1, httpd24-httpd-manual 2.4.12-6.el7.1, +1 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5) httpd24-httpd 2.4.12-4.el6.2, httpd24-mod_ssl 2.4.12-4.el6.2, httpd24-mod_ldap 2.4.12-4.el6.2, httpd24-httpd-tools 2.4.12-4.el6.2, httpd24-mod_session 2.4.12-4.el6.2, httpd24-httpd-manual 2.4.12-4.el6.2, +1 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) httpd24-httpd 2.4.12-4.el6.2, httpd24-mod_ssl 2.4.12-4.el6.2, httpd24-mod_ldap 2.4.12-4.el6.2, httpd24-httpd-tools 2.4.12-4.el6.2, httpd24-mod_session 2.4.12-4.el6.2, httpd24-httpd-manual 2.4.12-4.el6.2, +1 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) httpd24-httpd 2.4.12-6.el7.1, httpd24-mod_ssl 2.4.12-6.el7.1, httpd24-mod_ldap 2.4.12-6.el7.1, httpd24-httpd-tools 2.4.12-6.el7.1, httpd24-mod_session 2.4.12-6.el7.1, httpd24-httpd-manual 2.4.12-6.el7.1, +1 more Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) httpd24-httpd 2.4.12-4.el6.2, httpd24-mod_ssl 2.4.12-4.el6.2, httpd24-mod_ldap 2.4.12-4.el6.2, httpd24-httpd-tools 2.4.12-4.el6.2, httpd24-mod_session 2.4.12-4.el6.2, httpd24-httpd-manual 2.4.12-4.el6.2, +1 more
    +1 more products
    Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) httpd24-httpd 2.4.12-6.el7.1, httpd24-mod_ssl 2.4.12-6.el7.1, httpd24-mod_ldap 2.4.12-6.el7.1, httpd24-httpd-tools 2.4.12-6.el7.1, httpd24-mod_session 2.4.12-6.el7.1, httpd24-httpd-manual 2.4.12-6.el7.1, +1 more
    fixed: vendor fix RHSA-2015:1666
  • Red Hat CloudForms Management Engine 5 httpd Red Hat Directory Server 8 httpd Red Hat Enterprise Linux 4 httpd Red Hat Enterprise Linux 5 httpd Red Hat Enterprise Linux 6 httpd, mod_ssl, httpd-tools, httpd-manual Red Hat JBoss Enterprise Application Platform 6 httpd, mod_ssl, mod_ldap, httpd-tools, httpd-manual
    +2 more products
    Red Hat JBoss Enterprise Web Server 1 httpd Red Hat JBoss Enterprise Web Server 2 jbcs-httpd24, jbcs-httpd24-runtime
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

16.31% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls
Technology feeds

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.