Lucene search
Veracode Vulnerability DatabaseVERACODE:47965HistoryJul 09, 2024 - 6:06 a.m.
Server-Side Request Forgery (SSRF)
2024-07-0906:06:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
server-side request forgery
http server
windows
vulnerability
validation
attackers
ntlm hashes
malicious server
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
20.2%
Apache HTTP Server on Windows is vulnerable to Server-Side Request Forgery (SSRF). The vulnerability is due to a missing validation on HTTP requests allowing attackers to potentially leak NTLM hashes to a malicious server.
Related
osv
osv
BIT-apache-2024-38472
2024-07-03 07:17:47
CVE-2024-38472
2024-07-01 19:15:04
debiancve
debiancve
CVE-2024-38472
2024-07-01 19:15:04
hackerone
hackerone
cvelist
cvelist
CVE-2024-38472 Apache HTTP Server on WIndows UNC SSRF
2024-07-01 18:12:27
ubuntucve
ubuntucve
CVE-2024-38472
2024-07-01 00:00:00
vulnrichment
vulnrichment
CVE-2024-38472 Apache HTTP Server on WIndows UNC SSRF
2024-07-01 18:12:27
alpinelinux
alpinelinux
CVE-2024-38472
2024-07-01 19:15:04
nessus
nessus
CBL Mariner 2.0 Security Update: httpd (CVE-2024-38472)
2024-07-20 00:00:00
Photon OS 3.0: Httpd PHSA-2024-3.0-0771
2024-07-24 00:00:00
Photon OS 4.0: Httpd PHSA-2024-4.0-0651
2024-07-24 00:00:00
cve
cve
CVE-2024-38472
2024-07-01 19:15:04
nvd
nvd
CVE-2024-38472
2024-07-01 19:15:04
githubexploit
githubexploit
Exploit for CVE-2024-38472
2024-08-03 16:08:28
redhatcve
redhatcve
CVE-2024-38472
2024-07-18 22:07:24
photon
photon
Critical Photon OS Security Update - PHSA-2024-4.0-0651
2024-07-11 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0314
2024-07-11 00:00:00
Critical Photon OS Security Update - PHSA-2024-3.0-0771
2024-07-12 00:00:00
ibm
ibm
openvas
openvas
Slackware: Security Advisory (SSA:2024-184-01)
2024-07-03 00:00:00
Apache HTTP Server < 2.4.60 Multiple Vulnerabilities - Windows
2024-07-01 00:00:00
kaspersky
kaspersky
KLA70199 Multiple vulnerabilities in Apache HTTP Server
2024-07-01 00:00:00
slackware
slackware
[slackware-security] httpd
2024-07-02 19:38:48
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
20.2%
Related for VERACODE:47965