Description

Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man in the middle attacks. This issue affects Apache Traffic Server 8.0.0 to 8.0.8.

Remediation

References

CVE-2021-38161

Related Vulnerabilities

RubyGems Origin Validation Error Vulnerability (CVE-2017-0902)

Joomla Improper Input Validation Vulnerability (CVE-2011-4911)

Pega Infinity Direct Request ('Forced Browsing') Vulnerability (CVE-2019-16386)

Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-33333)

e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-1041)

Severity

High

Classification

CVE-2021-38161 CWE-287 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities