NetSight
IP …
high7.5

CVE-2018-11783

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin.

Impact

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 to 8.0.1.

Affected products

VendorProductAffected versions
ApacheTraffic Server
from 6.0.0 through 6.0.3
from 7.0.0 through 7.1.5
from 8.0.0 through 8.0.1

Weakness classification

CWE-200

References