PT-2018-8257
CVE-2017-5660
·
Publicado
2018-02-27
·
Atualizado
2018-03-21
Descrição por
CVSS 3.1
8.6
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Apache Traffic Server (ATS) versions 6.2.0 and prior
Apache Traffic Server (ATS) versions 7.0.0 and prior
Description:
The issue arises from the handling of the Host header and line folding, potentially causing problems when interacting with upstream proxies, leading to the wrong host being used.
Recommendations:
For Apache Traffic Server (ATS) versions 6.2.0 and prior, update to a version that addresses the Host header and line folding issue.
For Apache Traffic Server (ATS) versions 7.0.0 and prior, update to a version that addresses the Host header and line folding issue.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾