Description

Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT.

Remediation

References

CVE-2014-3624

Related Vulnerabilities

Internet Information Services Other Vulnerability (CVE-2000-0024)

WordPress Plugin ELEX WooCommerce Google Shopping (Google Product Feed) Cross-Site Scripting (1.2.3)

SugarCRM Incomplete List of Disallowed Inputs Vulnerability (CVE-2015-5946)

MySQL CVE-2019-2805 Vulnerability (CVE-2019-2805)

WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (6.2.03)

Severity

Critical

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-284 CVE-2014-3624