| Package | Affected versions | Patched versions |
|---|---|---|
| interchange | = 2.0.40_21.5 |
The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash (//).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free