| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| http server | ≥ 2.4.7, < 2.4.52 | 2.4.52 |
| communications element manager | < 9.0 | 9.0 |
| communications operations monitor | = 4.0= 4.3= 4.4= 5.0 | |
| communications session report manager | < 9.0 | 9.0 |
| communications session route manager | < 9.0 | 9.0 |
| http server | = 12.2.1.3.0= 12.2.1.4.0 | |
| instantis enterprisetrack | = 17.1= 17.2= 17.3 | |
| tenable.sc | ≥ 5.14.0, < 5.20.0≥ 5.16.0, < 202201.1 | 5.20.0202201.1 |
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン