Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2024-38472
CVE-2024-38472:
Apache HTTP Server vulnerability analysis and mitigation
Overview
SSRF (Server-Side Request Forgery) vulnerability in Apache HTTP Server on Windows (CVE-2024-38472) allows potential leakage of NTLM hashes to a malicious server through SSRF and malicious requests or content. The vulnerability was discovered by Orange Tsai from DEVCORE and affects Apache HTTP Server versions 2.4.0 through 2.4.59. Users are recommended to upgrade to version 2.4.60 which includes the fix (Apache Advisory, NVD).
Technical details
The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating network accessibility with low attack complexity and no required privileges or user interaction. The vulnerability specifically affects Windows deployments of Apache HTTP Server, where malicious requests can trigger NTLM hash leakage. After applying the fix, existing configurations that access UNC paths will require configuration of a new directive called 'UNCList' to allow access during request processing (NetApp Advisory).
Impact
The successful exploitation of this vulnerability could lead to the disclosure of sensitive NTLM hashes to a malicious server. This information disclosure could potentially be used by attackers for further attacks against the Windows infrastructure. The vulnerability is rated as HIGH severity due to its potential for exposing authentication credentials (NetApp Advisory).
Mitigation and workarounds
The primary mitigation is to upgrade to Apache HTTP Server version 2.4.60 or later. After upgrading, administrators must configure the new 'UNCList' directive if their deployment uses UNC paths. This new directive is required to allow access during request processing (Apache Advisory).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management