CVE-2024-39884

Katalog CVE

CVSS 6.2 · Medium EPSS 0,89%

Kerentanan pada apache http server, netapp ontap tools. Skor CVSS 3.1 6.2 (Medium) menurut CISA ADP.

Deskripsi (NVD)

A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers.   "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version 2.4.61, which fixes this issue.

Rincian

Terbit di NVD

4 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.2 (Medium), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

0,89% peluang dieksploitasi; lebih tinggi dari 58,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://httpd.apache.org/security/vulnerabilities_24.html advisory vendor
• https://security.netapp.com/advisory/ntap-20240712-0002/ advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2024/07/17/6 mailing list
• http://www.openwall.com/lists/oss-security/2024/07/03/8 mailing list