A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version 2.4.62, which fixes this issue.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3864-1 advisory.

    - CVE-2024-40725: Fixed source code disclosure of local content (bsc#1228097)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3750-1 advisory.

    - CVE-2024-40725: Fixed source code disclosure of local content (bsc#1228097)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3742-1 advisory.

    - CVE-2024-40725: Fixed source code disclosure of local content (bsc#1228097)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Oracle Essbase installed on the remote host is missing a security patch from the October 2024 Critical Patch Update (CPU). It is, therefore, affected by:

  - Vulnerability in Oracle Essbase (component: Essbase Web Platform (curl)). The supported version that is affected is     21.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols     to compromise Oracle Essbase. Successful attacks require human interaction from a person other than the attacker.     Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of Oracle Essbase. (CVE-2024-7264)

  - Security-in-Depth issue in Oracle Essbase (component: Essbase Web Platform (Apache Xerces-C++)). (CVE-2024-23807)

  - Security-in-Depth issue in Oracle Essbase (component: Essbase Web Platform (OpenSSL)). (CVE-2024-2511)   Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202409-31 (Apache HTTPD: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers     referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e83af0855e advisory.

    - Fix regression introduced by CVE-2024-38474 fix

    ----

    - new version 2.4.62
    - Fixes CVE-2024-40725

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of httpd installed on the remote host is prior to 2.4.62-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2606 advisory.

    A partial fix for  CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy     content-type based configuration of handlers. AddType and similar configuration, under some     circumstances where files are requested indirectly, result in source code disclosure of local content. For     example, PHP scripts may be served instead of interpreted.

    Users are recommended to upgrade to version 2.4.62, which fixes this issue. (CVE-2024-40725)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Tenable Security Center running on the remote host is 6.2.1, 6.3.0 or 6.4.0.
It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-13 advisory.

  - Security Center leverages third-party software to help provide underlying functionality. Several of the     third-party components (Apache, libcurl) were found to contain vulnerabilities, and updated versions have     been made available by the providers.Out of caution and in line with best practice, Tenable has opted to     upgrade these components to address the potential impact of the issues. Security Center Patch SC-202408.1     updates Apache to version 2.4.62 and libcurl to version 8.8.0 to address the identified vulnerabilities.
    Tenable has released Security Center Patch SC-202408.1 to address these issues. The installation files can     be obtained from the Tenable Downloads Portal: https://www.tenable.com/downloads/security-center     (CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466, CVE-2024-36387, CVE-2024-38472,     CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573,     CVE-2024-39884, CVE-2024-40725, CVE-2024-40898, CVE-2024-6197, CVE-2024-6874)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-681 advisory.

    A partial fix for  CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy     content-type based configuration of handlers. AddType and similar configuration, under some     circumstances where files are requested indirectly, result in source code disclosure of local content. For     example, PHP scripts may be served instead of interpreted.

    Users are recommended to upgrade to version 2.4.62, which fixes this issue. (CVE-2024-40725)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of httpd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-40725 advisory.

  - A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy     content-type based configuration of handlers. AddType and similar configuration, under some     circumstances where files are requested indirectly, result in source code disclosure of local content. For     example, PHP scripts May be served instead of interpreted. Users are recommended to upgrade to version     2.4.62, which fixes this issue. (CVE-2024-40725)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-de08df1535 advisory.

    - new version 2.4.62
    - Fixes CVE-2024-40725

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its banner, the version of Apache running on the remote host is 2.4.x prior to 2.4.62. It is, therefore, affected by multiple vulnerabilities:

 - A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. (CVE-2024-40725)

 - SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests. (CVE-2024-40898) Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of httpd installed on the remote host is prior to 2.4.62. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-200-01 advisory.

    New httpd packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the httpd security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 088b8b7d-446c-11ef-b611-84a93843eb75 advisory.

    The Apache httpd project reports:
    source code disclosure with handlers configured via AddType                 (CVE-2024-40725) (Important): A partial fix for CVE-2024-39884                 in the core of Apache HTTP Server 2.4.61 ignores some use of the                 legacy content-type based configuration of handlers. AddType                 and similar configuration, under some circumstances where files                 are requested indirectly, result in source code disclosure of                 local content. For example, PHP scripts may be served instead                 of interpreted.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6902-1 advisory.

    It was discovered that the Apache HTTP Server incorrectly handled certain handlers configured via AddType.
    A remote attacker could possibly use this issue to obtain source code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Apache httpd installed on the remote host is prior to 2.4.62. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.62 advisory.

  - A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy     content-type based configuration of handlers. AddType and similar configuration, under some     circumstances where files are requested indirectly, result in source code disclosure of local content. For     example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version     2.4.62, which fixes this issue. (CVE-2024-40725)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
210107	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : apache2 (SUSE-SU-2024:3864-1)	Nessus	SuSE Local Security Checks	medium
209836	SUSE SLES12 Security Update : apache2 (SUSE-SU-2024:3750-1)	Nessus	SuSE Local Security Checks	medium
209514	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : apache2 (SUSE-SU-2024:3742-1)	Nessus	SuSE Local Security Checks	medium
209277	Oracle Essbase Multiple Vulnerabilities (October 2024 CPU)	Nessus	Misc.	high
207890	GLSA-202409-31 : Apache HTTPD: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	critical
205744	Fedora 39 : httpd (2024-e83af0855e)	Nessus	Fedora Local Security Checks	critical
205730	Amazon Linux 2 : httpd (ALAS-2024-2606)	Nessus	Amazon Linux Local Security Checks	medium
205527	Tenable Security Center Multiple Vulnerabilities (TNS-2024-13)	Nessus	Misc.	critical
205087	Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2024-681)	Nessus	Amazon Linux Local Security Checks	medium
204814	CBL Mariner 2.0 Security Update: httpd (CVE-2024-40725)	Nessus	MarinerOS Local Security Checks	medium
202748	Fedora 40 : httpd (2024-de08df1535)	Nessus	Fedora Local Security Checks	medium
114385	Apache 2.4.x < 2.4.62 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
202636	Slackware Linux 15.0 / current httpd Multiple Vulnerabilities (SSA:2024-200-01)	Nessus	Slackware Local Security Checks	high
202615	FreeBSD : Apache httpd -- Source code disclosure with handlers configured via AddType (088b8b7d-446c-11ef-b611-84a93843eb75)	Nessus	FreeBSD Local Security Checks	medium
202614	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Apache HTTP Server vulnerability (USN-6902-1)	Nessus	Ubuntu Local Security Checks	medium
202577	Apache 2.4.60 < 2.4.62 Multiple Vulnerabilities	Nessus	Web Servers	medium

Detections

Analytics

CVE-2024-40725

medium

Tenable Plugins

medium

medium

medium

high

critical

critical

medium

critical

medium

medium

medium

high

high

medium

medium

medium