BIT-apache-2024-38472

vendorUSosv

view advisory published 2024-07-03Licence: per source

SSRF in Apache HTTP Server on Windows allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-38472US	—	69.5% (99th)	Exploit	2024-07-01
SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to v…

references

External citations — patches, advisories, analysis.

https://httpd.apache.org/security/vulnerabilities_24.htmlWEB
https://security.netapp.com/advisory/ntap-20240712-0001/WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan