CVE-2024-10306

Summary

CVE-2024-10306 is a vulnerability affecting mod_proxy_cluster. The issue lies in the misuse of the <Directory> directive, which should have been replaced with the <Location> directive. The <Directory> directive does not restrict IP/host access as intended, allowing anyone with access to the host to send Mal formaed Control Message Protocol (MCMP) requests. These requests may result in unauthorized adding, removal, or updating of nodes for the balancing cluster. However, the host should not be accessible to the public network as it does not serve general traffic. Therefore, it is crucial to use the correct directive and implement proper access controls to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.