Security Apache mod_session_crypt 2.5 Padding Oracle December 23, 2016 007admin Leave a comment Apache mod_session_crypto versions 2.3 through 2.5 suffer form a padding oracle vulnerability.