CVE-2022-31813 is a critical vulnerability affecting Apache HTTP Server versions up to 2.4.53 and NetApp Clustered Data ONTAP. This security issue involves the server not sending the X-Forwarded-* headers to the origin server based on the client-side Connection header hop-by-hop mechanism, which could be used to bypass IP-based authentication on the origin server or application. Systems running Apache HTTP Server and certain NetApp products are at risk, and it is crucial to update to the latest software versions to mitigate this vulnerability.

How do I know if I'm affected?

If you're using Apache HTTP Server versions up to 2.4.53, NetApp Clustered Data ONTAP, or Fedora versions 35 and 36, you might be affected by the vulnerability. This issue could lead to bypassing IP-based authentication on the origin server or application. To know if you're affected, check your software versions and stay informed about updates and security advisories related to these products.

What should I do if I'm affected?

If you're affected by the vulnerability, it's important to update your software to the latest version that includes fixes for this issue. For Apache HTTP Server, upgrade to version 2.4.54 or later. Fedora users should use the dnf update program to install the update, while Gentoo users should follow the provided commands to upgrade Apache HTTPD and Apache tools. NetApp users should obtain software fixes through the NetApp Support website or contact Technical Support for assistance.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2022-31813 vulnerability is not mentioned as being part of CISA's Known Exploited Vulnerabilities Catalog. This critical vulnerability affects Apache HTTP Server versions up to 2.4.53 and NetApp Clustered Data ONTAP. It could lead to bypassing IP-based authentication on the origin server or application. To protect your systems, it's essential to update your software to the latest version that includes fixes for this issue.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-345 and CWE-348, involves insufficient verification of data authenticity and use of less trusted sources, which could lead to bypassing IP-based authentication on servers or applications.

For more details

CVE-2022-31813 is a critical vulnerability affecting Apache HTTP Server and NetApp Clustered Data ONTAP, with a severity rating of 9.8. Successful exploitation could lead to bypassing IP-based authentication on servers or applications. To learn more about the vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• NVD - CVE-2022-31813

• Apache HTTP Server 2.4 Vulnerabilities

• Fedora 35 Update: httpd-2.4.54-1.fc35

• Apache HTTPD: Multiple Vulnerabilities (GLSA 202208-20) — Gentoo security

• June 2022 Apache HTTP Server Vulnerabilities in NetApp Products