Red Hat Enterprise Linux (mod_proxy_cluster): Schwachstelle ermöglicht Manipulation von Daten

Summary

Product

Vulnerabilities 1

• Medium 5.4
  CVE-2024-10306

  Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requests

  A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <Location> directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with acc…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 9.4 Extended Update Support Linux
  Apr 23, 2025

Revision history

1. 2025-06-30 #3

   Neue Updates von Oracle Linux und Red Hat aufgenommen

2. 2025-06-25 #2

   Neue Updates von Oracle Linux aufgenommen

3. 2025-06-23 #1

   Initiale Fassung

References

• RedHat Security Advisory vom 2025-06-23
  https://access.redhat.com/errata/RHSA-2025:9466
• RedHat Security Advisory vom 2025-06-23
  https://access.redhat.com/errata/RHSA-2025:9434
• RedHat Security Advisory CVE-2024-10306
  https://access.redhat.com/security/cve/CVE-2024-10306
• Oracle Linux Security Advisory ELSA-2025-9434 vom 2025-06-26
  http://linux.oracle.com/errata/ELSA-2025-9434.html
• Oracle Linux Security Advisory ELSA-2025-9466 vom 2025-06-30
  https://linux.oracle.com/errata/ELSA-2025-9466.html
• Red Hat Security Advisory RHSA-2025:9997 vom 2025-07-01
  https://access.redhat.com/errata/RHSA-2025:9997