PT-2021-9681

CVE-2020-13938

·

Published

2021-06-01

·

Updated

2026-10-09

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.46
Description The issue allows unprivileged local users to stop the httpd service on Windows. This was discovered by Ivan Zhakov.
Recommendations For Apache HTTP Server versions 2.4.0 through 2.4.46, consider restricting access to the service to prevent unauthorized stoppage until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2020-13938
BIT-APACHE-2020-13938
CLEANSTART-2026-DJ72396
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com