Apache Httpd 2.4.18 Exploit !!install!! Access

module. It allows a remote attacker to decrypt and modify session data stored in a user's browser. Exploit-DB

Beyond the CARPE DIEM LPE, version 2.4.18 is susceptible to several other attacks: HTTP/2 Denial of Service (CVE-2016-1546) apache httpd 2.4.18 exploit

For pen testers: When you see Apache/2.4.18 , do not stop at the version scan. Check: module