Threat database

CVE-2024-10306 is a moderate severity vulnerability in the mod_proxy_cluster module, a load-balancer plugin for Apache HTTP Server. It allows unauthorized MCMP requests due to incorrect authorization checks. Red Hat has released an update rebasing mod_proxy_cluster to version 1.3.22.Final to address this issue. Users running affected versions are advised to apply this update to remediate the vulnerability.