CVE-2021-40438

Published: Sep 16, 2021Modified: Jun 17, 2026CISA KEV

9.0

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 6.0

Source: NVD

Description

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

Affected (81)

Show all products

1 product

18 products

Enterprise Linux For Arm 64

Enterprise Linux For Arm 64 Eus

Enterprise Linux For Ibm Z Systems

Enterprise Linux For Ibm Z Systems Eus

Enterprise Linux For Ibm Z Systems Eus S390x

Enterprise Linux For Power Big Endian

Enterprise Linux For Power Little Endian

Enterprise Linux For Power Little Endian Eus

Enterprise Linux For Scientific Computing

Enterprise Linux Server Aus

Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions

Enterprise Linux Server Tus

Enterprise Linux Server Update Services For Sap Solutions

Enterprise Linux Update Services For Sap Solutions

Enterprise Linux Workstation

1 product

1 product

1 product

1 product

Brocade Fabric Operating System Firmware

3 products

1 product

5 products

Enterprise Manager Ops Center

Http Server

Instantis Enterprisetrack

Secure Global Desktop

Zfs Storage Appliance Kit

Siemens

4 products

Ruggedcom Nms

Sinec Nms

Sinema Remote Connect Server

Sinema Server

Tenable

1 product

Tenable.sc

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Resf Rocky Linux	Version 8.0

Configuration B

52 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Eus	Version 8.1
Redhat Enterprise Linux Eus	Version 8.2
Redhat Enterprise Linux Eus	Version 8.4
Redhat Enterprise Linux Eus	Version 8.6
Redhat Enterprise Linux Eus	Version 8.8
Redhat Enterprise Linux For Arm 64	Version 8.0
Redhat Enterprise Linux For Arm 64 Eus	Version 8.6
Redhat Enterprise Linux For Arm 64 Eus	Version 8.8
Redhat Enterprise Linux For Ibm Z Systems	Version 7.0_s390x
Redhat Enterprise Linux For Ibm Z Systems	Version 8.0
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 8.1
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 8.4
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 8.8
Redhat Enterprise Linux For Ibm Z Systems Eus S390x	Version 8.2
Redhat Enterprise Linux For Power Big Endian	Version 7.0
Redhat Enterprise Linux For Power Little Endian	Version 7.0
Redhat Enterprise Linux For Power Little Endian	Version 8.0
Redhat Enterprise Linux For Power Little Endian Eus	Version 8.1
Redhat Enterprise Linux For Power Little Endian Eus	Version 8.2
Redhat Enterprise Linux For Power Little Endian Eus	Version 8.4
Redhat Enterprise Linux For Power Little Endian Eus	Version 8.6
Redhat Enterprise Linux For Power Little Endian Eus	Version 8.8
Redhat Enterprise Linux For Scientific Computing	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.2
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Aus	Version 8.2
Redhat Enterprise Linux Server Aus	Version 8.4
Redhat Enterprise Linux Server Aus	Version 8.6
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 7.6
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 7.7
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 8.1
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 8.2
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 8.4
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 8.6
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 8.8
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Server Tus	Version 8.2
Redhat Enterprise Linux Server Tus	Version 8.4
Redhat Enterprise Linux Server Tus	Version 8.6
Redhat Enterprise Linux Server Tus	Version 8.8
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 7.6
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 7.7
Redhat Enterprise Linux Update Services For Sap Solutions	Version 8.1
Redhat Enterprise Linux Update Services For Sap Solutions	Version 8.2
Redhat Enterprise Linux Update Services For Sap Solutions	Version 8.4
Redhat Enterprise Linux Update Services For Sap Solutions	Version 8.6
Redhat Enterprise Linux Update Services For Sap Solutions	Version 8.8
Redhat Enterprise Linux Workstation	Version 7.0

Configuration C

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Redhat Jboss Core Services	Version 1.0

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0

Configuration D

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Redhat Software Collections	Version 1.0

Running on/with	Platform Versions
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Workstation	Version 7.0

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	Up to 2.4.48

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 34
Fedoraproject Fedora	Version 35

Configuration G

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0
Debian Debian Linux	Version 9.0

Configuration H

4 vulnerable

Vulnerable Software	Affected Versions
Broadcom Brocade Fabric Operating System Firmware	All versions
Netapp Cloud Backup	All versions
Netapp Clustered Data Ontap	All versions
Netapp Storagegrid	All versions

Configuration I

2 vulnerable

Vulnerable Software	Affected Versions
F5 F5os	From 1.1.0 to 1.1.4
F5 F5os	From 1.2.0 to 1.2.1

Configuration J

8 vulnerable

Vulnerable Software	Affected Versions
Oracle Enterprise Manager Ops Center	Version 12.4.0.0
Oracle Http Server	Version 12.2.1.3.0
Oracle Http Server	Version 12.2.1.4.0
Oracle Instantis Enterprisetrack	Version 17.1
Oracle Instantis Enterprisetrack	Version 17.2
Oracle Instantis Enterprisetrack	Version 17.3
Oracle Secure Global Desktop	Version 5.6
Oracle Zfs Storage Appliance Kit	Version 8.8

Configuration K

5 vulnerable

Vulnerable Software	Affected Versions
Siemens Ruggedcom Nms	All versions
Siemens Sinec Nms	Before 1.0.3
Siemens Sinema Remote Connect Server	Before 3.1
Siemens Sinema Remote Connect Server	Version 3.2
Siemens Sinema Server	Version 14.0

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
Tenable Tenable.sc	Up to 5.19.1

Related CWEs

CWE-918

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (39)

https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf

Source: security@apache.org

Third Party Advisory

https://httpd.apache.org/security/vulnerabilities_24.html

Source: security@apache.org

Release NotesVendor Advisory

https://lists.apache.org/thread.html/r210807d0bb55f4aa6fbe1512be6bcc4dacd64e84940429fba329967a%40%3Cusers.httpd.apache.org%3E

Source: security@apache.org

Mailing List

https://lists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37%40%3Cbugs.httpd.apache.org%3E

Source: security@apache.org

Mailing List

https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.httpd.apache.org%3E

Source: security@apache.org

Mailing List

https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c%40%3Cusers.httpd.apache.org%3E

Source: security@apache.org

Mailing List

https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697%40%3Cusers.httpd.apache.org%3E

Source: security@apache.org

Mailing List

https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029%40%3Cusers.httpd.apache.org%3E

Source: security@apache.org

Mailing List

https://lists.apache.org/thread.html/rf6954e60b1c8e480678ce3d02f61b8a788997785652e9557a3265c00%40%3Cusers.httpd.apache.org%3E

Source: security@apache.org

Mailing List

https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html

Source: security@apache.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/

Source: security@apache.org

Release Notes

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/

Source: security@apache.org

Release Notes

https://security.gentoo.org/glsa/202208-20

Source: security@apache.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20211008-0004/

Source: security@apache.org

Third Party Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ

Source: security@apache.org

Broken LinkThird Party Advisory

https://www.debian.org/security/2021/dsa-4982

Source: security@apache.org

Mailing ListThird Party Advisory

https://www.oracle.com/security-alerts/cpuapr2022.html

Source: security@apache.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html

Source: security@apache.org

PatchThird Party Advisory

https://www.tenable.com/security/tns-2021-17

Source: security@apache.org

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf