CVE-2011-3368: The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x throug...

Security readout for executives and security teams

This flaw affects old Apache HTTP Server reverse proxies using certain RewriteRule or ProxyPassMatch patterns. A remote requester could cause the proxy to reach internal servers that were not meant to be exposed. The business risk is unintended access into intranet services through a public web entry point. Exposure is most likely where legacy Apache httpd versions operate as internet-facing reverse proxies and use RewriteRule or ProxyPassMatch pattern matching. Systems not using mod_proxy reverse proxy behavior or those on fixed vendor builds are less likely exposed. Prioritize remediation if any public Apache reverse proxy still runs affected legacy versions or broad rewrite-based proxy rules. The issue can turn a web edge into an unintended path to internal services, but evidence in the bundle does not show active exploitation. Mitigation focus: Inventory Apache httpd reverse proxies and confirm exact version branches.; Review RewriteRule and ProxyPassMatch usage on public virtual hosts.; Apply the relevant Apache or operating-system vendor update..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.