PT-2020-3261 · Apache+8 · Apache Http Server+8

Published 2020-02-24 · Updated 2024-03-06 · CVE-2020-1927

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.41

Description The issue is related to the mod rewrite function in the Apache HTTP Server, where redirects intended to be self-referential can be fooled by encoded newlines, causing them to redirect to an unexpected URL within the request URL. This could potentially allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Apache HTTP Server versions 2.4.0 through 2.4.41, consider updating to a version where this issue is fixed, as the current version may allow redirects to be manipulated by encoded newlines, potentially leading to unauthorized access or information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

ALSA-2020:4751

ALT-PU-2020-1669

ALT-PU-2020-1686

BDU:2020-03569

BIT-APACHE-2020-1927

CESA-2020_3958

CESA-2020_4751

CVE-2020-1927

DLA-2706-1

DLA-3351-1

DSA-4757-1

MGASA-2020-0166

OPENSUSE-SU-2020:0597-1

OPENSUSE-SU-2020_0597-1

RHSA-2020:1337

RHSA-2020:2263

RHSA-2020:3958

RHSA-2020:4751

RHSA-2020_3958

RHSA-2020_4751

RLSA-2020:4751

SUSE-SU-2020:1111-1

SUSE-SU-2020:1126-1

SUSE-SU-2020:1272-1

USN-4458-1

Affected Products

Alt Linux

Almalinux

Apache Http Server

Centos

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

References · 125

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/tomcat_ghostcat.rb · Exploit
• 🔥 https://github.com/nibiwodong/CNVD-2020-10487-Tomcat-ajp-POC · Exploit
• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-10092-Limited%20Cross-Site%20Scripting%20in%20mod_proxy%20Error%20Page-Apache%20httpd · Exploit
• 🔥 https://github.com/sgdream/CVE-2020-1938 · Exploit
• 🔥 https://github.com/xindongzhuaizhuai/CVE-2020-1938 · Exploit
• 🔥 https://github.com/sv3nbeast/CVE-2020-1938-Tomact-file_include-file_read · Exploit
• 🔥 https://github.com/laolisafe/CVE-2020-1938 · Exploit
• 🔥 https://github.com/Hancheng-Lei/Hacking-Vulnerability-CVE-2020-1938-Ghostcat · Exploit
• 🔥 https://github.com/fairyming/CVE-2020-1938 · Exploit
• 🔥 https://github.com/woaiqiukui/CVE-2020-1938TomcatAjpScanner · Exploit
• 🔥 https://github.com/dacade/CVE-2020-1938 · Exploit
• 🔥 https://github.com/w4fz5uck5/CVE-2020-1938-Clean-Version · Exploit
• 🔥 https://github.com/fatal0/tomcat-cve-2020-1938-check · Exploit
• 🔥 https://github.com/motikan2010/CVE-2019-10092_Docker · Exploit
• 🔥 https://github.com/Just1ceP4rtn3r/CVE-2020-1938-Tool · Exploit