Apache High-severity Vulnerabilities: CVE-2024-40725 CVE-2024-39884 CVE-2024-40898

4mon — Thu, 25 Jul 2024 12:15:01 GMT

Hello All,
Does anyone have some information about this Apache Vulnerabilities?
Affecting Apache HTTP Server versions 2.4.0 through 2.4.61
As I checked the newest hotfix Take 76 for R81.20 haven't update for Apache HTTPD.

Details:

CVE-2024-40725: This vulnerability concerns an incomplete fix for a previous vulnerability (CVE-2024-39884) and affects the mod_proxy module. It allows attackers to potentially disclose sensitive source code information on the server under specific circumstances. This could include PHP scripts or other server-side files. This affects both Windows and Linux systems.
CVE-2024-40898: This vulnerability affects Apache HTTP Server on Windows systems with mod_rewrite in server/vhost context. A malicious actor could exploit this vulnerability to launch Server-Side Request Forgery (SSRF) attacks. This could potentially lead to leaking NTLM hashes or other sensitive information.

Re: Apache High-severity Vulnerabilities: CVE-2024-40725 CVE-2024-39884 CVE-2024-40898

PhoneBoy — Thu, 25 Jul 2024 13:37:30 GMT

I’m fairly certain we do not use either mod_rewrite or mod_proxy in our Apache implementation.
That makes both of these CVEs not relevant for Gaia OS.

For formal confirmation I recommend a TAC case: https://help.checkpoint.com

topic Apache High-severity Vulnerabilities: CVE-2024-40725 CVE-2024-39884 CVE-2024-40898 in Firewall and Security Management

Apache High-severity Vulnerabilities: CVE-2024-40725 CVE-2024-39884 CVE-2024-40898

Re: Apache High-severity Vulnerabilities: CVE-2024-40725 CVE-2024-39884 CVE-2024-40898