Apache HTTP Server Privilege Escalation Vulnerability in mod_rewrite

A privilege escalation vulnerability has been identified in Apache HTTP Server in versions through 2.4.66. This issue allows local .htaccess authors to read files with the privileges of the httpd user. The vulnerability arises from improper handling of directives in the mod_rewrite module, which can be exploited to access restricted files.

Impact

Exploitation of this vulnerability could lead to unauthorized access to files with the privileges of the httpd user, potentially allowing for sensitive information disclosure or further privilege escalation.

Remediation

Users are advised to upgrade to Apache HTTP Server version 2.4.67, which addresses this vulnerability.