PT-2023-28084 · Apache · Apache Traffic Server

Masakazu Kitajo · Publicado 2023-10-17 · Atualizado 2025-06-12 · CVE-2023-41752

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 8.1.8 Apache Traffic Server versions 9.0.0 through 9.2.2

Description The issue is related to the exposure of sensitive information to an unauthorized actor. It affects Apache Traffic Server, allowing unauthorized access to sensitive data.

Recommendations Apache Traffic Server versions 8.0.0 through 8.1.8 should be upgraded to version 8.1.9. Apache Traffic Server versions 9.0.0 through 9.2.2 should be upgraded to version 9.2.3.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2023-41752

DLA-3645-1

DSA-5549-1

Produtos afetados

Apache Traffic Server

Referências · 62

• 🔥 https://github.com/bcdannyboy/CVE-2023-44487 · Exploit
• 🔥 https://github.com/imabee101/CVE-2023-44487 · Exploit
• 🔥 https://github.com/studiogangster/CVE-2023-44487 · Exploit
• 🔥 https://github.com/nxenon/cve-2023-44487 · Exploit
• https://github.com/secengjeff/rapidresetclient · Nota
• https://github.com/terrorist/HTTP-2-Rapid-Reset-Client · Nota
• https://github.com/micrictor/http2-rst-stream · Nota
• https://github.com/ndrscodes/http2-rst-stream-attacker · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487 · Nota de Segurança
• https://security-tracker.debian.org/tracker/DSA-5549-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41752 · Nota de Segurança
• https://safe-surf.ru/specialists/bulletins-nkcki/704884 · Nota de Segurança
• https://safe-surf.ru/specialists/bulletins-nkcki/704210 · Nota de Segurança
• https://safe-surf.ru/specialists/bulletins-nkcki/699803 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33934 · Nota de Segurança