CVE-2024-40725

Published Jul 18, 2024

Last updated 5 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2024-40725 is a vulnerability affecting Apache HTTP Server versions 2.4.0 to 2.4.61. It involves the `mod_proxy` module, where enabling the `ProxyPass` directive with specific URL rewrite rules can lead to HTTP Request Smuggling attacks. This can occur when the proxy and backend servers parse HTTP requests inconsistently. The vulnerability can result in unauthorized access, data exposure, and session hijacking, potentially leading to data theft or manipulation. In some cases, "AddType" configurations may result in source code disclosure of local content, such as PHP scripts being served instead of interpreted. Users are recommended to upgrade to version 2.4.62 to address this issue.

Description: A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version 2.4.62, which fixes this issue.
Source: security@apache.org
NVD status: Modified
Products: http_server

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.3
Impact score: 1.4
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity: MEDIUM

Weaknesses

security@apache.org: CWE-668
nvd@nist.gov: NVD-CWE-noinfo

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 24

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:apache:http_server:2.4.60:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3B948936-6007-4436-AF16-CCE8F59E0C29"
          },
          {
            "criteria": "cpe:2.3:a:apache:http_server:2.4.61:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DA1CBE0F-AE94-4412-B8AB-8D6FC8698B86"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.