Apache – CVE-2022-26377

Description

Kayran has detected that the Version of Apache HTTP Server being used is vulnerable to Inconsistent Interpretation of HTTP Requests (‘HTTP Request Smuggling’).
Also known as CVE-2022-26377.

Abusing this vulnerability in mod_proxy_ajp of Apache HTTP Server allow attackers to smuggle requests to the AJP server it forwards requests to.

There’s a chance that this vulnerability will allow attackers to modify system files and information.

Recommendation

To fix CVE-2022-26377, upgrade the version of Apache HTTP Server being used to 2.4.54 or higher.

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26377

https://cwe.mitre.org/data/definitions/444.html

< Return to all Vulnerabilities

Passwords 101

Unlike basketballs, “passwords” are things we don’t want to be passed around, especially in a society built around the idea that “mystery” is appealing. We

Read More »

Active Directory Hacking

What does Active Directory mean? The Active Directory infrastructure is a critical infrastructure in most organizations, and it forms the backbone of the organization’s computing

Read More »