Skip to main content

Apache HTTP Server Multiple Vulnerabilities

Release Date: 13 Mar 2023 4136 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

TYPE: Web Servers

Multiple vulnerabilities were identified in Apache HTTP Server. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, sensitive information disclosure, cross-site scripting and security restriction bypass on the targeted system.

 


Impact

  • Denial of Service
  • Remote Code Execution
  • Information Disclosure
  • Cross-Site Scripting
  • Security Restriction Bypass

System / Technologies affected

  • Apache HTTP Server versions prior to 2.4.56

 

For IBM Products

  • IBM Security Access Manager for Enterprise Single-Sign On versions 8.2.1 and 8.2.2

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

  • Apache HTTP Server versions 2.4.56

 

For IBM Products

For detail, please refer to the links below:

https://www.ibm.com/support/pages/node/6962383

 


Vulnerability Identifier


Source


Related Link