Security Issues addressed in APROL R 4.4-01P5
An update is available that resolves several vulnerabilities and updates one or more 3rd party components in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could impact the availability of the product, spoof identities or elevate privileges.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-6901US | — | — | ||
Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL.
This issue affects APROL: before R 4.4-01P5. | ||||
| CVE-2026-6900US | — | — | ||
Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL.
This issue affects APROL: before R 4.4-01P5. | ||||
| CVE-2024-56337US | — | — | ||
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat.
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33,… | ||||
| CVE-2024-54677US | — | — | ||
Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service.
This issue affects Apache Tomcat: from 11.0… | ||||
| CVE-2024-50379US | — | Exploit | ||
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is… | ||||
| CVE-2024-52317US | — | Exploit | ||
Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the request and response used by HTTP/2 requests
could lead to request and/or respons… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (14)
- MitigationAPROL
Refer to section “General security recommendations” for further advise on how to keep your system secure.
- MitigationAPROL
Refer to section “General security recommendations” for further advise on how to keep your system secure.
- MitigationAPROL
Refer to section “General security recommendations” for further advise on how to keep your system secure.
- MitigationAPROL
Refer to section “General security recommendations” for further advise on how to keep your system secure.
- MitigationAPROL
Refer to section “General security recommendations” for further advise on how to keep your system secure.
- MitigationAPROL
Refer to section “General security recommendations” for further advise on how to keep your system secure.
- BehobenAPROL
The problem is corrected in the following product versions: - APROL >= R 4.4-01P5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- BehobenAPROL
The problem is corrected in the following product versions: - APROL >= R 4.4-01P5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- BehobenAPROL
The problem is corrected in the following product versions: - APROL >= R 4.4-01P5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- BehobenAPROL
The problem is corrected in the following product versions: - APROL >= R 4.4-01P5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- BehobenAPROL
The problem is corrected in the following product versions: - APROL >= R 4.4-01P5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- BehobenAPROL
The problem is corrected in the following product versions: - APROL >= R 4.4-01P5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- WorkaroundAPROL
Enable TLS Certificate Verification System-Wide Add the following configuration directive to the file /etc/openldap/ldap.conf: TLS_REQCERT demand This tells the LDAP client to require and verify the server's certificate. Configure Certificate Verification for Each User Account Each Linux user account (engineering, runtime, and operator accounts) needs its own configuration file that points to where its issuer certificates are stored. Create a .ldaprc file in the home directory of each account and add the appropriate certificate directory path. For Engineering Accounts: Create /home/<username>/.ldaprc and add: TLS_CACERTDIR /home/<username>/ENGIN/cnf/GLOBAL_ENGINEERING/LDAP/issuers/ For Runtime and Operator Accounts: Create /home/<username>/.ldaprc and add: TLS_CACERTDIR /home/<username>/RUNTIME/cnf/GLOBAL/LDAP/issuers/ Replace <username> with the actual Linux user account name. Prepare the Certificate Directories For each issuer certificate directory you created above, run this command to enable certificate verification: openssl rehash <issuer certificate directory> This command indexes the certificates so the system can find them quickly during verification. Deploy Trusted Certificates When you configure an external LDAP server, manually copy the server's trusted issuer certificate to the appropriate directories you created in “Configure Certificate Verification for Each User Account”.
- WorkaroundAPROL
Remove or replace all wildcard AliasMatch directives in the Apache configuration file For example, replace: AliasMatch ^/(.*)/PROJECTS/(.*)/WEB/(.*)/DOCS/(.*) "/home/$1/ENGIN/PROJECTS/$2/WEB/$3/DOCS/$4" with: AliasMatch ^/<systemname>/PROJECTS/<projectname>/WEB/(.*)/DOCS/(.*) "/home/<systemname>/PROJECTS/<projectname>/WEB/$1/DOCS/$2"
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan