Bug 1228098 (CVE-2024-40898)

Summary:	VUL-0: CVE-2024-40898: apache2: SSRF with mod_rewrite in server/vhost context on Windows
Product:	[Novell Products] SUSE Security Incidents	Reporter:	SMASH SMASH <smash_bz>
Component:	Incidents	Assignee:	David Anes <david.anes>
Status:	NEW ---	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P3 - Medium	CC:	abergmann
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	Other
URL:	https://smash.suse.de/issue/414495/
Whiteboard:	CVSSv3.1:SUSE:CVE-2024-40898:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Found By:	Security Response Team	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description SMASH SMASH 2024-07-18 08:42:36 UTC

From: Eric Covener <covener () apache org>
Date: Wed, 17 Jul 2024 18:25:03 +0000

Severity: important

Affected versions:

- Apache HTTP Server 2.4.0 through 2.4.61

Description:

SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes 
to a malicious server via SSRF and malicious requests.

Users are recommended to upgrade to version 2.4.62 which fixes this issue.

Credit:

Smi1e (DBAPPSecurity Ltd.) (finder)

References:

https://httpd.apache.org/security/vulnerabilities_24.html
https://httpd.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-40898

Timeline:

2024-07-12: reported

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-40898
https://seclists.org/oss-sec/2024/q3/88
https://www.cve.org/CVERecord?id=CVE-2024-40898

Comment 1 Alexander Bergmann 2024-07-18 08:43:24 UTC

This issue seams to be an isolated Windows problem.