{"id":"CVE-2016-0736","published":"2017-07-27T21:00:00Z","modified":"2024-09-16T17:52:49Z","title":"In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured…","vendor":"Apache Software Foundation","product":"Apache HTTP Server","tier":"core","eol":null,"affectedVersions":[{"vendor":"Apache Software Foundation","product":"Apache HTTP Server","versions":["2.4.0 to 2.4.23"]}],"description":{"text":"In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is in the mod_session_crypto component of the Apache HTTP Server, affecting versions 2.4.0 through 2.4.23, where session data and cookies were encrypted with CBC or ECB modes (AES256-CBC by default) and no authenticated encryption was available. An attacker able to submit data to the server and observe its responses could exploit this through padding oracle attacks, particularly against CBC mode, to recover or manipulate the protected session content.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T13:44:08Z"},"cvss":null,"epss":{"score":0.49024,"percentile":0.98878,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2023-02-14","exploitedFirstSeen":"2023-02-14","ransomware":true,"evidence":[{"url":"https://info.securin.io/hubfs/Securin%20Ransomware%20Report%202023.pdf","date":"2023-02-14"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":3,"pulses":[{"name":"smtech.hr  - 194.135.80.88 - #FANOS -   vuln to 24 CVE's","url":"https://otx.alienvault.com/pulse/6285ac654db92004b788b4ae","created":"2022-05-19"},{"name":"SMS Phisphing Campaign","url":"https://otx.alienvault.com/pulse/62826e6e99e1c6ccf06b100e","created":"2022-05-16"},{"name":"Internal CVE Research","url":"https://otx.alienvault.com/pulse/6228b4f0b2d5ade72cc7a0ea","created":"2022-03-09"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://support.apple.com/HT208221","tags":["x_refsource_CONFIRM"]},{"url":"http://www.debian.org/security/2017/dsa-3796","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://www.exploit-db.com/exploits/40961/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.securitytracker.com/id/1037508","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1413","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1161","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://www.tenable.com/security/tns-2017-04","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1414","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/95078","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1415.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0906","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-0736","tags":["x_refsource_CONFIRM"]},{"url":"https://security.gentoo.org/glsa/201701-36","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"https://security.netapp.com/advisory/ntap-20180423-0001/","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2016-0762","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-0762","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":40961,"url":"https://www.exploit-db.com/exploits/40961","title":"Apache mod_session_crypto - Padding Oracle","type":"webapps","platform":"multiple","date":"2016-12-23","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2016-12-23"},"first":{"date":"2016-12-23","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/40961"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/40961/"],"flow":[],"timeline":[{"date":"2016-12-23","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-40961)","url":"https://www.exploit-db.com/exploits/40961","provenance":"source"},{"date":"2017-07-27","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2016-0736","provenance":"source"},{"date":"2023-02-14","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://info.securin.io/hubfs/Securin%20Ransomware%20Report%202023.pdf","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":71.1,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1353 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"VulnCheck KEV: Known"},{"name":"EPSS percentile","points":19.78,"detail":"percentile 0.9888"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry"},{"name":"Mentioned in OTX pulses","points":1.37,"detail":"3 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}