Apache Traffic Server
Moderate fix2 remedies
cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*
Moderate fix2 remedies
- >= 9.0.0, <= 9.2.8
- >= 10.0.0, <= 10.0.3
Apache Traffic Server Improper Access Control Vulnerability
Vulnerability
Patched
A vulnerability has been identified in Apache Traffic Server versions 10.0.0 through 10.0.3, related to improper access control. This issue allows for access control lists (ACLs) to be incompatible with older versions, potentially leading to unauthorized access or actions.
Impact
The vulnerability could result in improper access control, allowing users to bypass restrictions and potentially access or modify resources they should not be able to.
Remediation
Users of Apache Traffic Server 10.x should upgrade to version 10.0.4 or later. Instructions for upgrading can be found in the Apache Traffic Server documentation.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
5.2impact
2.5exploitability
7.6remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.