CyberRota Analysis
AI-GeneratedApache Traffic Server versions 8.0.0 to 8.1.9, 9.0.0 to 9.2.14, and 10.0.0 to 10.1.3 are vulnerable to a bypass of IP access controls on UDS listeners due to ACL matching errors. This vulnerability could allow unauthorized access to sensitive resources, posing a significant security risk. Organizations using affected versions should prioritize upgrading to versions 9.2.15 or 10.1.4 to mitigate this high-severity issue.
Original NVD Description
Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)