Description (CNA)
The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authenticated Users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apache HTTP Server Project / Apache Lounge Windows | affected 0 before Apache 2.4.68-260920 Win64 |
CWE
No CWE identifiers supplied.
References
- https://httpd.apache.org/download.cgi
- https://atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testing
- https://www.apachelounge.com/viewtopic.php?t=9515
ADP enrichment
No English description supplied.
No references supplied.