PT-2024-5185

🗓️ 09 Jul 2024 00:00:00Reported by Positive TechnologiesType

Apache HTTP Server 2.4.61 has a vulnerability exposing source code under specific circumstances. Upgrade to 2.4.62.

Reporter	Title	Published	Views	Family All 388
FreeBSD	Apache httpd -- Source code disclosure with handlers configured via AddType	17 Jul 202400:00	–	freebsd
FreeBSD	Apache httpd -- Multiple vulnerabilities	20 Dec 202100:00	–	freebsd
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in IBM HTTP Server used by IBM Rational ClearQuest due to the included Apache HTTP Server (CVE-2024-40898, CVE-2024-40725)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2024-40898, CVE-2024-40725)	26 Jul 202413:14	–	ibm
IBM Security Bulletins	Security Bulletin: Due to IBM Tivoli Monitoring, IBM Cloud Pak System is affected by vulnerability [CVE-2024-40725]	21 Jan 202615:51	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2021-44790, CVE-2021-44224)	1 Apr 202210:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2021-44790, CVE-2021-44224)	16 Mar 202208:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with Eclipse Jetty, e2fsprogs, dnsjava , Apache Commons IO, Apache HTTP Server and Java SE affect IBM Cloud Object Storage Systems (Dec 2024)	4 Feb 202501:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple vulnerabilities.	15 Apr 202502:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server (powered by Apache) for i is vulnerable to CVE-2021-44224	28 Feb 202223:45	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2022-22719
github	www.github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898/blob/ALOK/CVE-2024-40725.py
suse	www.suse.com/security/cve/CVE-2023-45802
osv	www.osv.dev/vulnerability/OESA-2024-2288
suse	www.suse.com/security/cve/CVE-2006-20001
github	www.github.com/apache/httpd/commit/a7d24b4ea9a6ea35878fd33075365328caafcf91
suse	www.suse.com/security/cve/CVE-2024-40898
osv	www.osv.dev/vulnerability/DEBIAN-CVE-2024-40725
suse	www.suse.com/security/cve/CVE-2022-23943
bugzilla	www.bugzilla.suse.com/1267963

09 Oct 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26.4 - 10

CVSS 3.18.2 - 9.1

EPSS0.82295

SSVC