CVE-2020-13938: Improper Handling of Insufficient Privileges
Published Jun 10, 2021
·Updated
Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows
Affected Software
17 affected components
Apache HTTP Server>=2.4.0<=2.4.46
Microsoft Windows
McAfee ePolicy Orchestrator<5.10.0
McAfee ePolicy Orchestrator=5.10.0
McAfee ePolicy Orchestrator=5.10.0-update_1
McAfee ePolicy Orchestrator=5.10.0-update_10
McAfee ePolicy Orchestrator=5.10.0-update_11
McAfee ePolicy Orchestrator=5.10.0-update_12
McAfee ePolicy Orchestrator=5.10.0-update_2
McAfee ePolicy Orchestrator=5.10.0-update_3
McAfee ePolicy Orchestrator=5.10.0-update_4
McAfee ePolicy Orchestrator=5.10.0-update_5
McAfee ePolicy Orchestrator=5.10.0-update_6
McAfee ePolicy Orchestrator=5.10.0-update_7
McAfee ePolicy Orchestrator=5.10.0-update_8
McAfee ePolicy Orchestrator=5.10.0-update_9
NetApp Cloud Backup
Event History
Jun 10, 2021
CVE Published
via MITRE·07:10 AM
Data Sourced
via MITRE·07:10 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-13938?
The severity of CVE-2020-13938 is medium.
2
How can unprivileged local users stop httpd on Windows?
Unprivileged local users can stop httpd on Windows by exploiting CVE-2020-13938.
3
Which versions of Apache HTTP Server are affected by CVE-2020-13938?
Apache HTTP Server versions 2.4.0 to 2.4.46 are affected by CVE-2020-13938.
4
How do I fix CVE-2020-13938?
To fix CVE-2020-13938, upgrade Apache HTTP Server to version 2.4.47 or later.
5
Where can I find more information about CVE-2020-13938?
You can find more information about CVE-2020-13938 on the Apache HTTP Server website and the McAfee website.