CVE-2022-28330

🗓️ 08 Jun 2022 10:00:34Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 762 Views

Apache HTTP Server 2.4.53 Windows mod_isapi module bounds rea

Reporter	Title	Published	Views	Family All 79
FreeBSD	Apache httpd -- Multiple vulnerabilities	8 Jun 202200:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM Aspera Faspex 4.4.2 PL2 has addressed multiple vulnerabilities (CVE-2022-28330, CVE-2023-22868, CVE-2022-30556, CVE-2022-31813, CVE-2022-30522, CVE-2022-47986, CVE-2022-28615, CVE-2022-26377, CVE-2018-25032, CVE-2022-2068)	12 Nov 202402:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge is vulnerable to disclosure of sensitive information due to use of Apache HTTP server (CVE-2022-28330).	21 Jul 202205:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by vulnerability (CVE-2022-28330)	2 Feb 202317:34	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package apache2 version 1:2.4.54-alt1	21 Jun 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package apache2 version 1:2.4.54-alt1	19 Jun 202200:00	–	altlinux
ATTACKERKB	CVE-2022-28330	9 Jun 202217:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : httpd, httpd-core, httpd-devel (ALAS2022-2022-110)	7 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : httpd, httpd-core, httpd-devel (ALAS2022-2022-202)	4 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2023-072)	21 Mar 202300:00	–	nessus

NVD

Vulners

Node

apache http_serverRange≤2.4.53

AND

microsoft windowsMatch-

[
  {
    "platforms": [
      "Windows"
    ],
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.4.53",
        "status": "affected",
        "version": "Apache HTTP Server",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2022/06/08/3
security	www.security.netapp.com/advisory/ntap-20220624-0005/
httpd	www.httpd.apache.org/security/vulnerabilities_24.html

21 Nov 2024 06:57Current

7.1High risk

Vulners AI Score7.1

CVSS 25

CVSS 3.15.3

EPSS0.00488

CWE-125