Appliance Update: apache httpd XSS fix

Post Reply
User avatar
mark
Site Admin
Posts: 5519
Joined: Tue Apr 25, 2000 6:56 pm

Appliance Update: apache httpd XSS fix

Post by mark »

An update for apache httpd is available. It fixes potential XSS vulnerability when using the server-status feature and https appliance admin. Both are off by default.

After installation the https server needs to be restarted by either rebooting the appliance or by turning https admin off then back on. Don't use the https off/on method if you've configured your appliance to require https admin.
Post Reply