CVE-2024-40761: apache answer

csirt@kutim:~/threat-intel/cve/CVE-2024-40761

CVSS 5.3 · Medium EPSS 0,75%

Kerentanan Inadequate Encryption Strength pada apache answer. Skor CVSS 3.1 5.3 (Medium) menurut CISA ADP.

Deskripsi (NVD)

Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a user's email to access Gravatar is insecure and can lead to the leakage of user email. The official recommendation is to use SHA256 instead. Users are recommended to upgrade to version 1.4.0, which fixes the issue.

Rincian

Terbit di NVD: 25 September 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 5.3 (Medium), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-326: Inadequate Encryption Strength
EPSS (30 hari): 0,75% peluang dieksploitasi; lebih tinggi dari 53,7% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
apache	answer	Semua versi hingga 1.3.5

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://lists.apache.org/thread/mmrhsfy16qwrw0pkv0p9kj40vy3sg08x mailing list · advisory vendor
http://www.openwall.com/lists/oss-security/2024/09/25/2 mailing list · advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2024/09/25/5 mailing list · advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2024/09/25/6 mailing list · advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2024/09/25/7 mailing list · advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2024/09/25/8 mailing list · advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2024/09/26/1 mailing list · advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2024/09/26/3 mailing list · advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2024/09/26/4 mailing list · advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2024/09/27/4 mailing list · advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2024/09/27/5 mailing list · advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2024/09/27/8 mailing list · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.