A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
History
24 Jul 2024, 17:08
Type | Values Removed | Values Added |
---|---|---|
First Time |
Tenable
Broadcom brocade Fabric Operating System Firmware Tenable tenable.sc Siemens ruggedcom Nms Siemens sinema Remote Connect Server Broadcom |
|
CPE | cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:* cpe:2.3:a:siemens:sinema_remote_connect_server:3.2:*:*:*:*:*:*:* cpe:2.3:a:siemens:ruggedcom_nms:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:* |
|
References | () https://lists.apache.org/thread.html/r210807d0bb55f4aa6fbe1512be6bcc4dacd64e84940429fba329967a%40%3Cusers.httpd.apache.org%3E - Mailing List | |
References | () https://lists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37%40%3Cbugs.httpd.apache.org%3E - Mailing List | |
References | () https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.httpd.apache.org%3E - Mailing List | |
References | () https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c%40%3Cusers.httpd.apache.org%3E - Mailing List | |
References | () https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697%40%3Cusers.httpd.apache.org%3E - Mailing List | |
References | () https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029%40%3Cusers.httpd.apache.org%3E - Mailing List | |
References | () https://lists.apache.org/thread.html/rf6954e60b1c8e480678ce3d02f61b8a788997785652e9557a3265c00%40%3Cusers.httpd.apache.org%3E - Mailing List | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/ - Release Notes | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/ - Release Notes | |
References | () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ - Broken Link, Third Party Advisory | |
References | () https://www.debian.org/security/2021/dsa-4982 - Mailing List, Third Party Advisory |
07 Nov 2023, 03:38
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2021-09-16 15:15
Updated : 2024-07-24 17:08
NVD link : CVE-2021-40438
Mitre link : CVE-2021-40438
CVE.ORG link : CVE-2021-40438
JSON object : View
Products Affected
siemens
- ruggedcom_nms
- sinec_nms
- sinema_remote_connect_server
- sinema_server
oracle
- instantis_enterprisetrack
- secure_global_desktop
- http_server
- enterprise_manager_ops_center
- zfs_storage_appliance_kit
netapp
- clustered_data_ontap
- storagegrid
- cloud_backup
tenable
- tenable.sc
debian
- debian_linux
fedoraproject
- fedora
f5
- f5os
apache
- http_server
broadcom
- brocade_fabric_operating_system_firmware
CWE
CWE-918
Server-Side Request Forgery (SSRF)