PT-2025-26677 · Apache · Apache Http Server

Chua Wei Xun · Published 2025-06-23 · Updated 2025-06-24 · CVE-2025-48463

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Apache HTTP versions (affected versions not specified)

Description: The issue arises from the use of unencrypted HTTP communication, allowing an attacker to intercept data and conduct session hijacking on exposed data. This could lead to unauthorized access or data tampering.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

BDU:2025-08189

CVE-2025-48463

Affected Products

Apache Http Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-48463 · Security Note
• https://bdu.fstec.ru/vul/2025-08189 · Security Note
• https://advantech.com/en/support/details/firmware-?id=1-1B835P3 · Note
• https://csa.gov.sg/alerts-and-advisories/alerts/al-2025-061 · Note
• https://t.me/cvetracker/26890 · Telegram Post