PT-2023-28084 · Apache · Apache Traffic Server

Masakazu Kitajo · Published 2023-10-17 · Updated 2025-06-12 · CVE-2023-41752

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 8.1.8 Apache Traffic Server versions 9.0.0 through 9.2.2

Description The issue is related to the exposure of sensitive information to an unauthorized actor. It affects Apache Traffic Server, allowing unauthorized access to sensitive data.

Recommendations Apache Traffic Server versions 8.0.0 through 8.1.8 should be upgraded to version 8.1.9. Apache Traffic Server versions 9.0.0 through 9.2.2 should be upgraded to version 9.2.3.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2023-41752

DLA-3645-1

DSA-5549-1

Affected Products

Apache Traffic Server

References · 62

• 🔥 https://github.com/bcdannyboy/CVE-2023-44487 · Exploit
• 🔥 https://github.com/imabee101/CVE-2023-44487 · Exploit
• 🔥 https://github.com/studiogangster/CVE-2023-44487 · Exploit
• 🔥 https://github.com/nxenon/cve-2023-44487 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487 · Security Note
• https://security-tracker.debian.org/tracker/DSA-5549-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41752 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/704884 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/704210 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/699803 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33934 · Security Note
• https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/701953 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/703531 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/706948 · Security Note