CVE-2024-40898: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows
SSRF in Apache HTTP Server on Windows with modrewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests.
Users are recommended to upgrade to version 2.4.62 which fixes this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/apache2to a version that resolves this vulnerability.Fixed in 2.4.62-r0 - Upgrade
Upgrade
Apache HTTP Serverto a version that resolves this vulnerability.Fixed in 2.4.62
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40898?
CVE-2024-40898 is considered a high severity vulnerability due to the potential exposure of NTLM hashes.
How do I fix CVE-2024-40898?
To fix CVE-2024-40898, users should upgrade to Apache HTTP Server version 2.4.62 or later.
What type of vulnerability is CVE-2024-40898?
CVE-2024-40898 is an SSRF (Server-Side Request Forgery) vulnerability in Apache HTTP Server with mod_rewrite.
Which systems are affected by CVE-2024-40898?
CVE-2024-40898 affects Apache HTTP Server running on Microsoft Windows environments.
What can an attacker do with CVE-2024-40898?
An attacker exploiting CVE-2024-40898 can potentially leak NTLM hashes to a malicious server via crafted requests.