Vulnerabilities > CVE-2019-25043 - Improper Handling of Exceptional Conditions vulnerability in Trustwave Modsecurity
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string index out of range" error and worker-process crash for a "Cookie: =abc" header.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |