Ubuntu security notices
USN-4597-1: mod_auth_mellon vulnerabilities
USN-4597-1: mod_auth_mellon vulnerabilities François Kooman discovered that mod_auth_mellon incorrectly handled cookies. An attacker could possibly use this issue to cause a Cross-Site Session Transfer attack. (CVE-2017-6807) It was discovered that mod_auth_mellon incorrectly handled certain requests. An attacker could possibly use this issue to redirect a user to a malicious URL. (CVE-2019-3877) It was discovered that mod_auth_mellon incorrectly handled certain requests. An attacker could possibly use this issue to access sensitive information. (CVE-2019-3878) Source: USN-4597-1: mod_auth_mellon vulnerabilities