Description
ACL configured in ip_allow.config or remap.config does not use IP addresses that are provided by PROXY protocol. Users can use a new setting (proxy.config.acl.subjects) to choose which IP addresses to use for the ACL if Apache Traffic Server is configured to accept PROXY protocol. This issue affects undefined: from 10.0.0 through 10.0.6, from 9.0.0 through 9.2.10. Users are recommended to upgrade to version 9.2.11 or 10.0.6, which fixes the issue.
Remediation
References
Related Vulnerabilities
Oracle HTTP Server Improper Input Validation Vulnerability (CVE-2020-35169)
WordPress Plugin Pondol Form to Mail Cross-Site Scripting (1.1)
WordPress Plugin Advanced Ads-Ad Manager & AdSense Cross-Site Scripting (1.17.3)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4288)
WordPress Plugin PIKLIST-Rapid development framework Cross-Site Scripting (0.9.4.25)