Description
ACL configured in ip_allow.config or remap.config does not use IP addresses that are provided by PROXY protocol. Users can use a new setting (proxy.config.acl.subjects) to choose which IP addresses to use for the ACL if Apache Traffic Server is configured to accept PROXY protocol. This issue affects undefined: from 10.0.0 through 10.0.6, from 9.0.0 through 9.2.10. Users are recommended to upgrade to version 9.2.11 or 10.0.6, which fixes the issue.
Remediation
References
Related Vulnerabilities
WordPress Plugin Price Commander for WooCommerce Security Bypass (1.2.2)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-32472)
Microsoft SQL Server Other Vulnerability (CVE-2000-1087)
WordPress Plugin Font Uploader 'font-upload.php' Arbitrary File Upload (1.2.4)