CVE-2021-44224

Products

• CA Identity Suite

Issue/Introduction

Found the following article that discusses about the vulnerability found in httpd. Need confirmation whether it will bring any impact for 14.3 and 14.4 ?

Apache found critical bugs in httpd web server | CyberNews

CVE-2021-44224: Possible NULL dereference or SSRF in forwarding proxy configurations in Apache HTTP Server 2.4.51 and earlier.

Environment

Vapp 14.3,14.4

Resolution

The CVE-2021-44224 is not vulnerable, as the VApp proxy uses a reverse proxy configuration.

Additional Information

Reference Defect DE524026