Security restrictions bypass in Apache HTTP Server - CVE-2017-15715

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU11284

Security restrictions bypass in Apache HTTP Server - CVE-2017-15715

Published: March 27, 2018 / Updated: July 14, 2018


Vulnerability identifier: #VU11284
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-15715
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass security restrictions on the target system.

The weakness exists on systems that allow uploading of user-specified filenames due to the '<FilesMatch>' expression may not correctly match characters in a filename. A remote attacker can supply a specially crafted filename to potentially bypass security controls that use the '<FilesMatch>' directive.

Affected software

Apache HTTP Server
Arch Linux
Debian Linux
Amazon Linux AMI
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux Server
SUSE Linux
Fedora
Tenable.sc
apache2 (Alpine package)
httpd (Red Hat package)
httpd
IBM API Connect
Dell Secure Connect Gateway
Data Computing Appliance (DCA)

How to mitigate CVE-2017-15715

Update to version 2.4.32.

Apache HTTP Server - update to 2.4.32
Tenable.sc - update to 5.13.0
apache2 (Alpine package) - update to 2.4.33-r0
httpd (Red Hat package) - update to 2.4.6-95.el7
IBM API Connect - update to 5.0.8.12
Dell Secure Connect Gateway - update to 5.12.00.10
httpd - addressed in versions 2.4.33-2.fc26, 2.4.33-2.fc27, 2.4.33-2.fc28, 2.4.33-4.fc26
Data Computing Appliance (DCA) - update to 4.3.0.0

External References

Related Security Bulletins