Description
xApache HTTP Server存在认证绕过漏洞，该漏洞是由于resource接口对用户的权限校验不当导致的。
Apache HTTP Server CVE-2024-38473 认证绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2024-38473
https://cve.imfht.com/detail/CVE-2024-38473
https://devco.re/blog/2024/08/09/confusion-attacks-exploiting-hidden-semantic-ambiguity-in-apache-http-server/
https://rivers.chaitin.cn/blog/cqr0pg10lne22g7e74ig
https://www.technice.com.tw/techmanage/infosecurity/124842/
https://www.zhongfu.net/news/info/1303.html
https://zhuanlan.zhihu.com/p/4249525215
https://orange-tw.blogspot.com/
https://github.com/Abdurahmon3236/CVE-2024-38473
https://access.redhat.com/security/cve/cve-2024-38473
https://ubuntu.com/security/CVE-2024-38473
https://my.f5.com/manage/s/article/K000140505
https://httpd.apache.org/security/vulnerabilities_24.html
https://vulners.com/nessus/APACHE_2_4_60.NASL
https://www.ibm.com/support/pages/security-bulletin-vulnerability-apache-http-server-cve-2024-38473-affects-power-hmc
https://support.checkpoint.com/results/sk/sk182899
https://ikhaleelkhan.medium.com/detecting-apache-servers-vulnerable-to-cve-2024-38473-with-nuclei-6c0c214d24e5