CVE-2024-38472 Apache HTTP Server on WIndows UNC SSRF

🗓️ 01 Jul 2024 18:12:27Reported by apacheType

Apache HTTP Server Windows SSRF vulnerabilit

Reporter	Title	Published	Views	Family All 62
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server	29 Jul 202414:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple vulnerabilities.	15 Apr 202502:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server.	26 Jul 202413:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server and Java, affect IBM Tivoli Monitoring.	5 Sep 202419:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	15 Apr 202502:57	–	ibm
AlpineLinux	CVE-2024-38472	1 Jul 202418:12	–	alpinelinux
Tenable Nessus	Apache 2.4.x < 2.4.60 Multiple Vulnerabilities	1 Jul 202400:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: httpd (CVE-2024-38472)	10 Feb 202500:00	–	nessus
Tenable Nessus	GLSA-202409-31 : Apache HTTPD: Multiple Vulnerabilities	28 Sep 202400:00	–	nessus

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.4.59",
        "status": "affected",
        "version": "2.4.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
httpd	www.httpd.apache.org/security/vulnerabilities_24.html