CVE-2023-33933
Assigner: apache
Published: 2023-06-14T07:44:12.626Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Apache Traffic Server
vendor: Apache Software Foundation
versions: lessThanOrEqual: 9.2.0
status: affected
version: 8.0.0
versionType: semver
credits: type: reporter
value: Masakazu Kitajo
descriptions: supportingMedia: base64: no
type: text/html
value: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Server.<p>This issue affects Apache Traffic Server: from 8.0.0 through 9.2.0.</p><p>8.x users should upgrade to 8.1.7 or later versions<br>9.x users should upgrade to 9.2.1 or later versions<br></p>
value: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: from 8.0.0 through 9.2.0.

8.x users should upgrade to 8.1.7 or later versions
9.x users should upgrade to 9.2.1 or later versions



metrics: other: content: text: low
type: Textual description of severity
problemTypes: descriptions: cweId: CWE-200
description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
type: CWE
source: discovery: UNKNOWN
title: Apache Traffic Server: s3_auth plugin problem with hash calculation
x_generator: engine: Vulnogram 0.1.0-dev