Lucene search
Ubuntu.comUB:CVE-2024-38472HistoryJul 01, 2024 - 12:00 a.m.
CVE-2024-38472
2024-07-0100:00:00
ubuntu.com
ubuntu.com
ssrf
apache http server
windows
ntml hashes
upgrade
version 2.4.60
unc paths
6.8 Medium
AI Score
Confidence
Low
SSRF in Apache HTTP Server on Windows allows to potentially leak NTML
hashes to a malicious server via SSRF and malicious requests or content
Users are recommended to upgrade to version 2.4.60 which fixes this issue.
Note: Existing configurations that access UNC paths will have to configure
new directive “UNCList” to allow access during request processing.
Notes
| Author | Note |
|---|---|
| alexmurray | Only affects Apache HTTP Server on Windows so apache2 in Ubuntu is not affected. |
Related
cvelist
cvelist
CVE-2024-38472 Apache HTTP Server on WIndows UNC SSRF
2024-07-01 18:12:27
debiancve
debiancve
CVE-2024-38472
2024-07-01 19:15:04
osv
osv
BIT-apache-2024-38472
2024-07-03 07:17:47
alpinelinux
alpinelinux
CVE-2024-38472
2024-07-01 19:15:04
cve
cve
CVE-2024-38472
2024-07-01 19:15:04
nvd
nvd
CVE-2024-38472
2024-07-01 19:15:04
kaspersky
kaspersky
KLA70199 Multiple vulnerabilities in Apache HTTP Server
2024-07-01 00:00:00
nessus
nessus
Apache 2.4.x < 2.4.60 Multiple Vulnerabilities
2024-07-01 00:00:00
Apache 2.4.x < 2.4.60 Multiple Vulnerabilities
2024-07-03 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2024-184-01)
2024-07-03 00:00:00
Apache HTTP Server < 2.4.60 Multiple Vulnerabilities - Windows
2024-07-01 00:00:00
slackware
slackware
[slackware-security] httpd
2024-07-02 19:38:48