PT-2023-3360 · Apache · Apache Traffic Server

Masakazu Kitajo · Publicado 2023-06-13 · Atualizado 2024-10-09 · CVE-2023-33933

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 9.2.0

Description The issue is related to insufficient protection of service data, which may allow a remote attacker to gain unauthorized access to confidential information.

Recommendations 8.x users should upgrade to 8.1.7 or later versions 9.x users should upgrade to 9.2.1 or later versions

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2023-03516

CVE-2023-33933

DLA-3475-1

DSA-5435-1

DSA-5435-2

OESA-2023-1972

OESA-2023-1973

OESA-2023-1974

Produtos afetados

Apache Traffic Server

Referências · 39

• https://osv.dev/vulnerability/DLA-3475-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30631 · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/6GDCBNFDDW6ULW7CACJCPENI7BVDHM5O · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/DLA-3475-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33933 · Nota de Segurança
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1974 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33933 · Nota
• https://ubuntu.com/security/CVE-2023-33933 · Aviso do Fabricante
• https://packages.debian.org/src:trafficserver · Nota
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1973 · Nota
• https://bdu.fstec.ru/vul/2023-03516 · Nota de Segurança
• https://t.me/cvenotify/52848 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-33933 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=2215002 · Nota
• https://bdu.fstec.ru/vul/2023-03413 · Nota de Segurança