imPC@ndo IT

Tracker / CVE-2020-11984

CVE-2020-11984

Critical 9.8

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

Affected products and versions

apache http_server · 2.4.32 → 2.4.43
canonical ubuntu_linux
debian debian_linux
fedoraproject fedora
netapp clustered_data_ontap
opensuse leap
oracle communications_element_manager · 8.2.0 → 8.2.2
oracle communications_session_report_manager · 8.2.0 → 8.2.2
oracle communications_session_route_manager · 8.2.0 → 8.2.2
oracle enterprise_manager_ops_center
oracle hyperion_infrastructure_technology
oracle instantis_enterprisetrack
oracle zfs_storage_appliance_kit

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References