Red Hat Security Advisory

RHSA-2021:3746

Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP9 security update

Released 2021-10-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-httpd-2.4.37-76.jbcs.el7, jbcs-httpd24-httpd-devel-2.4.37-76.jbcs.el7, jbcs-httpd24-httpd-manual-2.4.37-76.jbcs.el7 +13
Red Hat JBoss Core Services on RHEL 8 jbcs-httpd24-httpd-2.4.37-76.el8jbcs, jbcs-httpd24-httpd-devel-2.4.37-76.el8jbcs, jbcs-httpd24-httpd-manual-2.4.37-76.el8jbcs +13

TI-2021-17490 CVE-2021-40438 · GHSA-rwxq-58vm-3v2j

CRITICAL 98KEV

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.99999 Published 2021-09-16 Fixed CWE-918