CVE-2019-10092 patch changed "404 Not Found" not to show the url-path.
Issue
- CVE-2019-10092 patch changed "404 Not Found" not to show the url-path.
Before the patch:
$ curl http://web1.example.com/test.html
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /test.html was not found on this server.</p>
</body></html>
After the patch:
$ curl http://web2.example.com/test.html
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
</body></html>
Environment
- Red Hat Enterprise Linux 8
- httpd
- Red Hat Software Collections for Red Hat Enterprise Linux 6
- Red Hat Software Collections for Red Hat Enterprise Linux 7
- httpd24-httpd
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
