Description

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.

Remediation

References

CVE-2020-17509

Related Vulnerabilities

Serendipity Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2332)

MySQL CVE-2013-5891 Vulnerability (CVE-2013-5891)

Opencart Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2023-40834)

OpenSSL Cryptographic Issues Vulnerability (CVE-2011-5095)

PHP Numeric Errors Vulnerability (CVE-2009-4418)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities CVE-2020-17509