vulnerability

OS X update for apache (CVE-2022-22720)

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
2022-03-14
Added
2022-05-17
Modified
2024-10-14

Description

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

Solution(s)

apple-osx-security-update-2022-004-catalinaapple-osx-upgrade-11_6_6apple-osx-upgrade-12_4
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.