HTTP: Apache httpd FilesMatch Directive Security Restriction Bypass

This signature detects attempts to exploit a known vulnerability against Apache httpd. A remote attacker can exploit this vulnerability by sending a HTTP PUT request with crafted URI to the remote HTTP server. Successful exploitation could result in security policy bypass and arbitrary file upload if the HTTP server is configured to allow file uploading like HTTP PUT method.

Extended Description

In Apache httpd 2.4.0 to 2.4.29, the expression specified in could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename.

Affected Products

Netapp storagegrid

References

CVE: CVE-2017-15715

Short Name

HTTP:APACHE:FILEMATCH-BYPASS

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Apache httpd FilesMatch Directive Security Restriction Bypass

Extended Description

Affected Products

References

Found a potential security threat?