摘要:
SSRF in Apache HTTP Server on Windows allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive UNCList to allow access during request processing.
安全等级: Low
公告ID: KylinSec-SA-2024-3179
发布日期: 2024年7月16日
关联CVE: CVE-2024-38472
SSRF in Apache HTTP Server on Windows allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive UNCList to allow access during request processing.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2024-38472 | KY3.4-5A | httpd | Unaffected |
| CVE-2024-38472 | KY3.5.2 | httpd | Unaffected |
| CVE-2024-38472 | V6 | httpd | Unaffected |
