Vulnerabilities

TI-2018-05817 CVE-2018-8040 · GHSA-g5v3-3xfp-hgx6

Exposure of resource to wrong sphere in Apache Traffic Server

LOW 34

Pages that are rendered using the ESI plugin can have access to the cookie header when the plugin is configured not to allow access.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.07166 Published 2018-08-29 No fix listed CWE-668

TI-2018-05782 CVE-2018-8005 · GHSA-98hg-h5w7-368p

LOW 34

When there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the entire object from cache.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.06808 Published 2018-08-29 No fix listed CWE-400

TI-2018-05781 CVE-2018-8004 · GHSA-whhq-69jf-g65h

LOW 38

There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apache Traffic Server (ATS).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.06228 Published 2018-08-29 No fix listed CWE-444

TI-2018-01221 CVE-2018-1318 · GHSA-3mf6-hp9h-pxf7

MEDIUM 43

Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.07627 Published 2018-08-29 No fix listed CWE-20