SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Apache Software Foundation | Apache HTTP Server | 2.4.0 – ≤ 2.4.59 | |
| apache | http server | 2.4.0 – < 2.4.60 | |
| apache_software_foundation | apache_http_server | < 2.4.60 | |
| netapp | ontap | 9 |
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:* ≥ 2.4.0 < 2.4.60cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*Unser kostenloser Open-Source-Honeypot wartet auf Ports, die Ihr Server nicht nutzt, und meldet verbindende Scanner und Angreifer an eine gemeinsame Blockliste.