PT-2024-5104

🗓️ 01 Apr 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 14 Views

Apache HTTP Server versions 2.4.59 and earlier have a Server-Side Request Forgery vulnerability.

Reporter	Title	Published	Views	Family All 429
FreeBSD	Apache httpd -- Source code disclosure with handlers configured via AddType	17 Jul 202400:00	–	freebsd
FreeBSD	Apache httpd -- source code disclosure	4 Jul 202400:00	–	freebsd
FreeBSD	Apache httpd -- Multiple vulnerabilities	1 Jul 202400:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server	29 Jul 202414:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple vulnerabilities (CVE-2024-38477, CVE-2021-38963, CVE-2024-38475, CVE-2024-38474)	15 Apr 202502:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in http-server affect Cloud Pak System	29 Oct 202410:37	–	ibm
IBM Security Bulletins	Security Bulletin: Due to IBM Tivoli Monitoring, IBM Cloud Pak System is affected by vulnerability [CVE-2024-40725]	21 Jan 202615:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to a remote attacker obtaining sensitive information, bypassing security restrictions, and a server-side request forgery due to multiple vulnerabilities.	8 Dec 202414:16	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities.	22 May 202521:25	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2022-22719
bugzilla	www.bugzilla.redhat.com/2295012
suse	www.suse.com/security/cve/CVE-2023-45802
osv	www.osv.dev/vulnerability/SUSE-SU-2024:2624-1
ubuntu	www.ubuntu.com/security/notices/USN-6885-4
access	www.access.redhat.com/security/cve/CVE-2024-38474
suse	www.suse.com/security/cve/CVE-2006-20001
ubuntu	www.ubuntu.com/security/CVE-2025-49812
ubuntu	www.ubuntu.com/security/CVE-2024-42516
access	www.access.redhat.com/security/cve/CVE-2024-39573

09 Oct 2026 00:00Current

7High risk

Vulners AI Score7

CVSS 3.18.1 - 9.8

EPSS0.3718

SSVC

apache http server server-side request forgery vulnerability fix upgrade recommendation