critical9.8
CVE-2014-3624
Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CO…
Impact
Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Traffic Server | Version 5.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://mail-archives.apache.org/mod_mbox/www-announce/201411.mbox/%3C20141101231749.2E3561043F%40minotaur.apache.org%3E
- http://www.securityfocus.com/bid/101630
- https://issues.apache.org/jira/browse/TS-2677
- http://mail-archives.apache.org/mod_mbox/www-announce/201411.mbox/%3C20141101231749.2E3561043F%40minotaur.apache.org%3E
- http://www.securityfocus.com/bid/101630
- https://issues.apache.org/jira/browse/TS-2677