Description

This alert was generated using only banner information. It may be a false positive.

Apache has reported a vulnerability in the mod_cgid module when the threaded MPM is used. This could potentially expose sensitive information or incorrectly grant unauthorized access.

Affected Apache versions (up to 2.0.47).

Remediation

Upgrade Apache 2.x to the latest version.

References

BID 8926

Apache homepage

Related Vulnerabilities

Oracle JRE CVE-2013-0448 Vulnerability (CVE-2013-0448)

CubeCart Session Fixation Vulnerability (CVE-2021-33394)

WordPress Plugin History Collection Arbitrary File Download (1.1.1)

Drupal Core 4.6.x Session Fixation (4.6.0 - 4.6.5)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2359)

Severity

Medium

Classification

CVE-2003-0542 CVE-2003-0789 CWE-119 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Denial Of Service Information Disclosure Missing Update