Apache · Apache Traffic Server · CVE-2018-8004
Name of the Vulnerable Software and Affected Versions:
Apache Traffic Server (ATS) versions 6.0.0 through 6.2.2
Apache Traffic Server (ATS) versions 7.0.0 through 7.1.3
Description:
The issue arises from HTTP smuggling and cache poisoning when malicious requests are made to Apache Traffic Server (ATS).
Recommendations:
For versions 6.0.0 through 6.2.2, upgrade to version 6.2.3 or later.
For versions 7.0.0 through 7.1.3, upgrade to version 7.1.4 or later.