Access Control Flaw in Apache HTTP Server's mod_proxy_cluster

CVE-2024-10306

What is CVE-2024-10306?

A vulnerability affecting Apache HTTP Server's mod_proxy_cluster arises from the incorrect use of the directive instead of the directive. As a result, the necessary IP/host access controls are not enforced, permitting any individual with access to the host to issue MCMP requests. This could lead to the unauthorized addition, removal, or updating of nodes in the load balancing setup. It is critical to restrict access to this host, as it should not be exposed to public networks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References