Lucene search
Veracode Vulnerability DatabaseVERACODE:47964HistoryJul 09, 2024 - 6:06 a.m.
Authentication Bypass
2024-07-0906:06:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
apache http server
mod_proxy
authentication bypass
vulnerability
encoding problem
backend services
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
AI Score
6.7
Confidence
Low
mod_proxy in Apache HTTP Server is vulnerable to Authentication Bypass. The vulnerability is caused due to encoding problem. This allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests.
Related
debiancve
debiancve
CVE-2024-38473
2024-07-01 19:15:04
hackerone
hackerone
osv
osv
BIT-apache-2024-38473
2024-07-03 07:17:33
CVE-2024-38473
2024-07-01 19:15:04
Security update for apache2
2024-08-21 15:33:21
f5
f5
K000140505: Apache HTTPD vulnerability CVE-2024-38473
2024-08-03 00:00:00
nessus
nessus
CBL Mariner 2.0 Security Update: httpd (CVE-2024-38473)
2024-07-20 00:00:00
SUSE SLES15 Security Update : apache2 (SUSE-SU-2024:2997-1)
2024-08-22 00:00:00
SUSE SLES12 Security Update : apache2 (SUSE-SU-2024:2999-1)
2024-08-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-38473 affecting package httpd for versions less than 2.4.61-1
2024-08-14 20:43:58
CVE-2024-38473 affecting package httpd for versions less than 2.4.62-1
2024-07-26 17:52:50
cve
cve
CVE-2024-38473
2024-07-01 19:15:04
githubexploit
githubexploit
Exploit for CVE-2024-38473
2024-08-23 14:39:31
Exploit for CVE-2024-38473
2024-08-02 19:57:52
ubuntucve
ubuntucve
CVE-2024-38473
2024-07-01 00:00:00
CVE-2024-39573
2024-07-01 00:00:00
nvd
nvd
CVE-2024-38473
2024-07-01 19:15:04
vulnrichment
vulnrichment
CVE-2024-38473 Apache HTTP Server proxy encoding problem
2024-07-01 18:14:21
alpinelinux
alpinelinux
CVE-2024-38473
2024-07-01 19:15:04
cvelist
cvelist
CVE-2024-38473 Apache HTTP Server proxy encoding problem
2024-07-01 18:14:21
redhatcve
redhatcve
CVE-2024-38473
2024-07-01 21:49:32
redhat
redhat
(RHSA-2024:5001) Moderate: httpd security update
2024-08-05 08:31:48
(RHSA-2024:4720) Important: httpd:2.4 security update
2024-07-23 08:15:17
(RHSA-2024:4726) Important: httpd security update
2024-07-23 12:57:04
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2997-1)
2024-08-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2999-1)
2024-08-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:3173-1)
2024-09-10 00:00:00
rocky
rocky
httpd security update
2024-07-26 12:33:59
almalinux
almalinux
Important: httpd security update
2024-07-23 00:00:00
Important: httpd:2.4 security update
2024-07-23 00:00:00
oraclelinux
oraclelinux
httpd security update
2024-07-23 00:00:00
httpd:2.4 security update
2024-07-23 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: httpd-2.4.61-1.fc40
2024-07-09 01:55:52
[SECURITY] Fedora 39 Update: httpd-2.4.61-1.fc39
2024-07-19 02:21:50
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2024-07-01 00:00:00
ibm
ibm
amazon
amazon
Important: httpd
2024-07-18 02:00:00
kaspersky
kaspersky
KLA70199 Multiple vulnerabilities in Apache HTTP Server
2024-07-01 00:00:00
ubuntu
ubuntu
Apache HTTP Server regression
2024-07-11 00:00:00
Apache HTTP Server vulnerabilities
2024-07-08 00:00:00
slackware
slackware
[slackware-security] httpd
2024-07-02 19:38:48
mageia
mageia
Updated apache packages fix security vulnerabilities
2024-07-09 10:01:06
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
AI Score
6.7
Confidence
Low
Related for VERACODE:47964