Description

This alert was generated using only banner information. It may be a false positive.

Apache has reported a vulnerability in the mod_cgid module when the threaded MPM is used. This could potentially expose sensitive information or incorrectly grant unauthorized access.

Affected Apache versions (up to 2.0.47).

Remediation

Upgrade Apache 2.x to the latest version.

References

BID 8926

Apache homepage

Related Vulnerabilities

WordPress Plugin GeoDirectory-WordPress Business Directory and Classified Ads Listings Cross-Site Scripting (2.1.1.2)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-5132)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-1578)

MySQL CVE-2022-21640 Vulnerability (CVE-2022-21640)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1570)

Severity

Medium

Classification

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Denial Of Service Information Disclosure Missing Update CWE-119 CVE-2003-0542 CVE-2003-0789