Skip to main content

Public advisory of scammers impersonating CSA and the SPF

Stay vigilant. Read the public advisory

Cyber Security Agency of Singapore
  1. Home
  2. Alerts & Advisories
  3. Alerts
  4. Critical Vulnerability in Apache HTTP Server
Alerts

Critical Vulnerability in Apache HTTP Server

10 July 2024

Apache Software Foundation has released security updates to address a critical vulnerability (CVE-2024-39884) in their Apache HTTP Server. The vulnerability has a a Common Vulnerability Scoring System (CVSSv3) score of 9.1 out of 10.

Successful exploitation of the source code disclosure vulnerability could allow an unauthenticated attacker to access sensitive information from the servers.

The vulnerability affects Apache HTTP Server version 2.4.60.

Users and administrators of the affected product version are advised to update to the latest version immediately.

More information is available here:

https://securityaffairs.com/165422/security/apache-source-code-disclosure-flaw-apache-http-server.html?utm_source=tldrinfosec

https://httpd.apache.org/security/vulnerabilities_24.html

https://www.tenable.com/cve/CVE-2024-39884