Lucene search
GoogleOSV:BIT-APACHE-2024-38472HistoryJul 03, 2024 - 7:17 a.m.
BIT-apache-2024-38472
2024-07-0307:17:47
Google
osv.dev
3
ssrf
apache http server
windows
ntml hashes
malicious requests
upgrade
unc paths
unclist
6.7 Medium
AI Score
Confidence
Low
SSRF in Apache HTTP Server on Windows allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive “UNCList” to allow access during request processing.
Related
cvelist
cvelist
CVE-2024-38472 Apache HTTP Server on WIndows UNC SSRF
2024-07-01 18:12:27
ubuntucve
ubuntucve
CVE-2024-38472
2024-07-01 00:00:00
debiancve
debiancve
CVE-2024-38472
2024-07-01 19:15:04
alpinelinux
alpinelinux
CVE-2024-38472
2024-07-01 19:15:04
cve
cve
CVE-2024-38472
2024-07-01 19:15:04
nvd
nvd
CVE-2024-38472
2024-07-01 19:15:04
kaspersky
kaspersky
KLA70199 Multiple vulnerabilities in Apache HTTP Server
2024-07-01 00:00:00
nessus
nessus
Apache 2.4.x < 2.4.60 Multiple Vulnerabilities
2024-07-01 00:00:00
Apache 2.4.x < 2.4.60 Multiple Vulnerabilities
2024-07-03 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2024-184-01)
2024-07-03 00:00:00
Apache HTTP Server < 2.4.60 Multiple Vulnerabilities - Windows
2024-07-01 00:00:00
slackware
slackware
[slackware-security] httpd
2024-07-02 19:38:48