Lucene search

ROSA LABROSA-SA-2024-2363

HistoryFeb 27, 2024 - 9:22 a.m.

Advisory ROSA-SA-2024-2363

2024-02-2709:22:20

ROSA LAB

abf.rosalinux.ru

mod_wsgi 4.6.4

rosa virtualization 2.1

cve-2022-2255

bdu-id 2022-05209

apache web server

x-client-ip header

unauthorized access

fixed

yum update command

unix

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.3%

JSON

Software: mod_wsgi 4.6.4
OS: ROSA Virtualization 2.1

package_evr_string: mod_wsgi-4.6.4-4.rv3.1c

CVE-ID: CVE-2022-2255
BDU-ID: 2022-05209
CVE-Crit: MEDIUM.
CVE-DESC.: A vulnerability in the mod_wsgi module of the Apache web server is related to errors in the processing of the X-Client-IP header. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to network services
CVE-STATUS: Fixed
CVE-REV: To close, run the yum update mod_wsgi command.

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchmod_wsgi< 4.6.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ROSA	any	noarch	mod_wsgi	< 4.6.4	UNKNOWN