Search for vulnerabilities
Vulnerability details: VCID-yap9-d5ja-pqfg
Vulnerability ID VCID-yap9-d5ja-pqfg
Aliases CVE-2014-8109
Summary Fix handling of the Require line in mod_lau when a LuaAuthzProvider is used in multiple Require directives with different arguments. This could lead to different authentication rules than expected.
Status Published
Exploitability 0.5
Weighted Severity 2.1
Risk 1.1
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.03842 https://api.first.org/data/v1/epss?cve=CVE-2014-8109
epss 0.03842 https://api.first.org/data/v1/epss?cve=CVE-2014-8109
epss 0.03842 https://api.first.org/data/v1/epss?cve=CVE-2014-8109
epss 0.1585 https://api.first.org/data/v1/epss?cve=CVE-2014-8109
epss 0.1585 https://api.first.org/data/v1/epss?cve=CVE-2014-8109
epss 0.1585 https://api.first.org/data/v1/epss?cve=CVE-2014-8109
epss 0.1585 https://api.first.org/data/v1/epss?cve=CVE-2014-8109
epss 0.1585 https://api.first.org/data/v1/epss?cve=CVE-2014-8109
epss 0.1585 https://api.first.org/data/v1/epss?cve=CVE-2014-8109
epss 0.1585 https://api.first.org/data/v1/epss?cve=CVE-2014-8109
epss 0.1585 https://api.first.org/data/v1/epss?cve=CVE-2014-8109
epss 0.1585 https://api.first.org/data/v1/epss?cve=CVE-2014-8109
epss 0.1585 https://api.first.org/data/v1/epss?cve=CVE-2014-8109
apache_httpd low https://httpd.apache.org/security/json/CVE-2014-8109.json
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8109.json
https://api.first.org/data/v1/epss?cve=CVE-2014-8109
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8109
1174077 https://bugzilla.redhat.com/show_bug.cgi?id=1174077
CVE-2014-8109 https://httpd.apache.org/security/json/CVE-2014-8109.json
USN-2523-1 https://usn.ubuntu.com/2523-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.87824
EPSS Score 0.03842
Published At Aug. 1, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:29:00.428127+00:00 Apache HTTPD Importer Import https://httpd.apache.org/security/json/CVE-2014-8109.json 37.0.0