Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2024-38472
HistoryJul 18, 2024 - 10:07 p.m.

CVE-2024-38472

2024-07-1822:07:24
redhat.com
access.redhat.com
35
cve-2024-38472
ssrf
apache http server
windows
ntml hashes
malicious requests
upgrade
version 2.4.60
unc paths
unclist

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

20.2%

JSON

A flaw was found in httpd on Windows systems. This issue potentially allows NTLM hashes to be leaked to a malicious server via Server-side request forgery (SSRF) and malicious requests or content.

Related

debiancve 1
osv 2
hackerone 1
cvelist 1
alpinelinux 1
nessus 8
cve 1
ubuntucve 1
veracode 1
vulnrichment 1
nvd 1
githubexploit 1
photon 3
ibm 3
kaspersky 1
openvas 2
slackware 1
debiancve
debiancve
CVE-2024-38472
2024-07-01 19:15:04
osv
osv
BIT-apache-2024-38472
2024-07-03 07:17:47
CVE-2024-38472
2024-07-01 19:15:04
hackerone
hackerone
Internet Bug Bounty: important: Apache HTTP Server on WIndows UNC SSRF (CVE-2024-38472)
2024-07-03 07:02:15
cvelist
cvelist
CVE-2024-38472 Apache HTTP Server on WIndows UNC SSRF
2024-07-01 18:12:27
alpinelinux
alpinelinux
CVE-2024-38472
2024-07-01 19:15:04
nessus
nessus
CBL Mariner 2.0 Security Update: httpd (CVE-2024-38472)
2024-07-20 00:00:00
Photon OS 3.0: Httpd PHSA-2024-3.0-0771
2024-07-24 00:00:00
Photon OS 4.0: Httpd PHSA-2024-4.0-0651
2024-07-24 00:00:00
cve
cve
CVE-2024-38472
2024-07-01 19:15:04
ubuntucve
ubuntucve
CVE-2024-38472
2024-07-01 00:00:00
veracode
veracode
Server-Side Request Forgery (SSRF)
2024-07-09 06:06:43
vulnrichment
vulnrichment
CVE-2024-38472 Apache HTTP Server on WIndows UNC SSRF
2024-07-01 18:12:27
nvd
nvd
CVE-2024-38472
2024-07-01 19:15:04
githubexploit
githubexploit
Exploit for CVE-2024-38472
2024-08-03 16:08:28
photon
photon
Critical Photon OS Security Update - PHSA-2024-4.0-0651
2024-07-11 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0314
2024-07-11 00:00:00
Critical Photon OS Security Update - PHSA-2024-3.0-0771
2024-07-12 00:00:00
ibm
ibm
Security Bulletin: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server
2024-07-29 14:30:36
Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server.
2024-07-26 13:13:30
Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server and Java, affect IBM Tivoli Monitoring.
2024-09-05 19:12:07
kaspersky
kaspersky
KLA70199 Multiple vulnerabilities in Apache HTTP Server
2024-07-01 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2024-184-01)
2024-07-03 00:00:00
Apache HTTP Server < 2.4.60 Multiple Vulnerabilities - Windows
2024-07-01 00:00:00
slackware
slackware
[slackware-security] httpd
2024-07-02 19:38:48

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

20.2%

JSON
Related for RH:CVE-2024-38472
debiancve1osv2hackerone1cvelist1alpinelinux1nessus8cve1ubuntucve1veracode1vulnrichment1nvd1githubexploit1photon3ibm3kaspersky1openvas2slackware1