Security Advisories

IAC-2024-0072024-09–09Webserver source code disclosure (part 2)

Severity: Medium
Affected versions: 21.0-p21004 – 21.0-p21569
Fixed version: 21.0-p21573
Related CVEs: CVE-2024-40725
The webserver shipped with an IACBOX (apache) had a source code disclosure vulnerability in version 2.4.60.
This was only partially fixed with version 2.4.61 that has already been shipped with IACBOX version 21.0-p21566.
We have not been able to trigger this vulnerability anymore, but to be safe, we advise you to update to the latest version 21.0-p21573

See the apache changelog for details

Privacy settings

We use cookies to provide social media features and to analyze traffic to our website. More information

Accept all
Save & close