Summary
The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality.
Security Fix(es):
* mod_proxy_cluster: mod_proxy_cluster unauthorized MCMP requests (CVE-2024-10306)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 10 | mod_proxy_cluster | 0:1.3.22-1.el10_0.2 |
Vulnerabilities 1
-
Medium 5.4
Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requests
A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <Location> directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with acc…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2321302