Intrusion PreventionApache.HTTP.Server.cgi-bin.Path.Traversal
Description
This indicates an attack attempt to exploit a Path Traversal Vulnerability in Apache HTTP Server.
The vulnerability is due to a path normalisation error in Apache HTTP Server. Successful exploitation can potentially lead to information disclosure.
Affected Products
Apache HTTP Server 2.4.49, 2.4.50
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://httpd.apache.org/security/vulnerabilities_24.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2023-08-10 | 25.619 | Sig Added |
| 2021-11-18 | 18.199 | Sig Added |
| 2021-11-08 | 18.192 | Default_action:pass:drop |
| 2021-10-07 | 18.173 |
| ID | 50825 |
| Created | Oct 07, 2021 |
| Updated | Aug 09, 2023 |
| Outbreak Alert | Apache Path Traversal CISAtop20_PRC2022 2022 Annual Report |
| Risk |
|
| CVE ID | CVE-2021-42013 CVE-2021-41773 |
| EPSS | 97.42% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Apache |