K000132665 : Apache HTTPD vulnerability CVE-2022-37436

Security Advisory Description

Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client. (CVE-2022-37436)

Impact

As a result of this vulnerability, some HTTP headers may be incorporated into the HTTP response sent to a client; this behavior allows a client to bypass them if the HTTP headers have a security purpose.