CVE-2023-41752
Assigner: apache
Published: 2023-10-17T06:57:47.508Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Apache Traffic Server
vendor: Apache Software Foundation
versions: lessThanOrEqual: 8.1.8
status: affected
version: 8.0.0
versionType: semver
lessThanOrEqual: 9.2.2
status: affected
version: 9.0.0
versionType: semver
credits: type: finder
value: Masakazu Kitajo
descriptions: supportingMedia: base64: no
type: text/html
value: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Traffic Server.<p>This issue affects Apache Traffic Server: from 8.0.0 through 8.1.8, from 9.0.0 through 9.2.2.</p><p>Users are recommended to upgrade to version 8.1.9 or 9.2.3, which fixes the issue.</p>
value: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Traffic Server.This issue affects Apache Traffic Server: from 8.0.0 through 8.1.8, from 9.0.0 through 9.2.2.

Users are recommended to upgrade to version 8.1.9 or 9.2.3, which fixes the issue.


metrics: other: content: text: low
type: Textual description of severity
problemTypes: descriptions: cweId: CWE-200
description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
type: CWE
source: discovery: UNKNOWN
title: Apache Traffic Server: s3_auth plugin problem with hash calculation
x_generator: engine: Vulnogram 0.1.0-dev