CVE-2024-40725

🗓️ 18 Jul 2024 09:32:43Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 344 Views

Partial fix for Apache HTTP Server 2.4.61 CVE-2024-3988

Reporter	Title	Published	Views	Family All 138
FreeBSD	Apache httpd -- Source code disclosure with handlers configured via AddType	17 Jul 202400:00	–	freebsd
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in IBM HTTP Server used by IBM Rational ClearQuest due to the included Apache HTTP Server (CVE-2024-40898, CVE-2024-40725)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2024-40898, CVE-2024-40725)	26 Jul 202413:14	–	ibm
IBM Security Bulletins	Security Bulletin: Due to IBM Tivoli Monitoring, IBM Cloud Pak System is affected by vulnerability [CVE-2024-40725]	21 Jan 202615:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with Eclipse Jetty, e2fsprogs, dnsjava , Apache Commons IO, Apache HTTP Server and Java SE affect IBM Cloud Object Storage Systems (Dec 2024)	4 Feb 202501:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple vulnerabilities.	15 Apr 202502:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2024-40898, CVE-2024-40725]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server (CVE-2024-40898, CVE-2024-40725)	29 Jul 202414:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server and Java, affect IBM Tivoli Monitoring.	5 Sep 202419:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server affect IBM Business Automation Workflow (CVE-2024-40898, CVE-2024-40725)	3 Aug 202413:05	–	ibm

NVD

Vulners

Node

apache http_serverMatch2.4.60

apache http_serverMatch2.4.61

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.4.61",
        "status": "affected",
        "version": "2.4.60",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
security	www.security.netapp.com/advisory/ntap-20240808-0007/

14 Mar 2025 18:15Current

7.4High risk

Vulners AI Score7.4

CVSS 3.15.3

EPSS0.25097

SSVC

CWE-668