PT-2024-4844 · Apache+1 · Apache Http Server+1

Smi1E + 1 · Published 2024-07-17 · Updated 2026-01-22 · CVE-2024-40898

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions prior to 2.4.62

Description: The issue is related to a Server-side Request Forgery (SSRF) vulnerability in the mod rewrite module of the Apache HTTP Server on Windows. This vulnerability can be exploited by a remote attacker to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. The problem is caused by insufficient validation of incoming requests.

Recommendations: For versions prior to 2.4.62, upgrade to version 2.4.62, which fixes this issue. As a temporary workaround, consider restricting access to the mod rewrite module to minimize the risk of exploitation.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2024-05368

BIT-APACHE-2024-40898

CVE-2024-40898

MGASA-2024-0272

OPENSUSE-SU-2024:14245-1

Affected Products

Apache Http Server

Red Os

References · 37

• 🔥 https://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-40898 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2024-40898 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0272.html · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14245-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05368 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/712964 · Security Note
• https://osv.dev/vulnerability/MGASA-2024-0272 · Vendor Advisory
• https://httpd.apache.org/security/vulnerabilities_24.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-40898 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/711016 · Security Note
• https://osv.dev/vulnerability/BIT-apache-2024-40898 · Vendor Advisory
• https://t.me/tmfeed/209185 · Telegram Post
• https://bugs.mageia.org/show_bug.cgi?id=33412 · Note
• https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-40898 · Note