vulnerability

IBM HTTP Server: CVE-2022-30556: Apache HTTP Server could allow a remote attacker to obtain sensitive information, caused by an error in mod_lua with websockets

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Jun 9, 2022
Added
Aug 31, 2022
Modified
Jan 20, 2023

Description

Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of the storage allocated for the buffer.

Solution(s)

ibm-http_server-apply-interim-fix-ph46897-for-7_0ibm-http_server-apply-interim-fix-ph46897-for-8_0ibm-http_server-apply-interim-fix-ph46897-for-8_5ibm-http_server-apply-interim-fix-ph46897-for-9_0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.