1.0 Introduction
Recently, Apache Software Foundation has released security updates to address multiple vulnerabilities in Apache HTTP Server.
2.0 Impact
Successful exploitation of these vulnerabilities may allow a remote attacker to trigger remote code execution, data manipulation, denial of service, security restriction bypass and sensitive information disclosure on the targeted system. This may lead to execution of arbitrary code, unauthorised access to sensitive information and system compromise.
3.0 Affected Products
? Apache HTTP Server versions prior to 2.4.69
4.0 Recommendation
CyberSecurity
Malaysia encourages users and administrators to review the following Apache
security advisory and apply the necessary updates. Users are advised to update
to Apache HTTP Server 2.4.69 or later.
Kindly refer to the following URL:
Generally, we advise users to be
updated with the latest security announcements by the vendor and follow best
practice security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999
Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours)
Mobile: +60 19 2665850 (24x7 call incident reporting)
Business Hours: Mon - Fri 08:30 -17:30 MYT
Web: https://www.cybersecurity.my
5.0 References