{
    "data_version": "4.0",
    "data_type": "CVE",
    "data_format": "MITRE",
    "CVE_data_meta": {
        "ID": "CVE-2014-8109",
        "ASSIGNER": "secalert@redhat.com",
        "STATE": "PUBLIC"
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration that specifies authorization for one group to access a certain directory, and authorization for a second group to access a second directory."
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "n/a"
                    }
                ]
            }
        ]
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "n/a",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "n/a",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_affected": "=",
                                            "version_value": "n/a"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "references": {
        "reference_data": [
            {
                "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
                "refsource": "MISC",
                "name": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
            },
            {
                "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
                "refsource": "MISC",
                "name": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
            },
            {
                "url": "http://advisories.mageia.org/MGASA-2015-0011.html",
                "refsource": "MISC",
                "name": "http://advisories.mageia.org/MGASA-2015-0011.html"
            },
            {
                "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
                "refsource": "MISC",
                "name": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
                "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html",
                "refsource": "MISC",
                "name": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html"
            },
            {
                "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159352.html",
                "refsource": "MISC",
                "name": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159352.html"
            },
            {
                "url": "http://www.openwall.com/lists/oss-security/2014/11/28/5",
                "refsource": "MISC",
                "name": "http://www.openwall.com/lists/oss-security/2014/11/28/5"
            },
            {
                "url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
                "refsource": "MISC",
                "name": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html"
            },
            {
                "url": "http://www.securityfocus.com/bid/73040",
                "refsource": "MISC",
                "name": "http://www.securityfocus.com/bid/73040"
            },
            {
                "url": "http://www.ubuntu.com/usn/USN-2523-1",
                "refsource": "MISC",
                "name": "http://www.ubuntu.com/usn/USN-2523-1"
            },
            {
                "url": "https://github.com/apache/httpd/commit/3f1693d558d0758f829c8b53993f1749ddf6ffcb",
                "refsource": "MISC",
                "name": "https://github.com/apache/httpd/commit/3f1693d558d0758f829c8b53993f1749ddf6ffcb"
            },
            {
                "url": "https://issues.apache.org/bugzilla/show_bug.cgi?id=57204",
                "refsource": "MISC",
                "name": "https://issues.apache.org/bugzilla/show_bug.cgi?id=57204"
            },
            {
                "url": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
                "refsource": "MISC",
                "name": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E"
            },
            {
                "url": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
                "refsource": "MISC",
                "name": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E"
            },
            {
                "url": "https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
                "refsource": "MISC",
                "name": "https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E"
            },
            {
                "url": "https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
                "refsource": "MISC",
                "name": "https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E"
            },
            {
                "url": "https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
                "refsource": "MISC",
                "name": "https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E"
            },
            {
                "url": "https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
                "refsource": "MISC",
                "name": "https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E"
            },
            {
                "url": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
                "refsource": "MISC",
                "name": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E"
            },
            {
                "url": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
                "refsource": "MISC",
                "name": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E"
            },
            {
                "url": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
                "refsource": "MISC",
                "name": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E"
            },
            {
                "url": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
                "refsource": "MISC",
                "name": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E"
            },
            {
                "url": "https://support.apple.com/HT205219",
                "refsource": "MISC",
                "name": "https://support.apple.com/HT205219"
            },
            {
                "url": "https://support.apple.com/kb/HT205031",
                "refsource": "MISC",
                "name": "https://support.apple.com/kb/HT205031"
            },
            {
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1174077",
                "refsource": "MISC",
                "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1174077"
            }
        ]
    }
}