Description
Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.
Remediation
References
Related Vulnerabilities
ownCloud Resource Management Errors Vulnerability (CVE-2015-4717)
WordPress Plugin WP-Recall-Registration, Profile, Commerce & More Security Bypass (16.26.6)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1559)
WordPress Plugin WP Lead Management Cross-Site Scripting (3.0.0)
WordPress 4.7.x Denial of Service Vulnerability (4.7 - 4.7.9)