PT-2023-28084 · Apache · Apache Traffic Server

Masakazu Kitajo · CVE-2023-41752 · Published 2023-10-17 · Updated 2025-06-12

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 8.1.8 Apache Traffic Server versions 9.0.0 through 9.2.2

Description The issue is related to the exposure of sensitive information to an unauthorized actor. It affects Apache Traffic Server, allowing unauthorized access to sensitive data.

Recommendations Apache Traffic Server versions 8.0.0 through 8.1.8 should be upgraded to version 8.1.9. Apache Traffic Server versions 9.0.0 through 9.2.2 should be upgraded to version 9.2.3.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2023-41752

DLA-3645-1

DSA-5549-1

Affected Products

Apache Traffic Server

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41752.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-41752 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-41752 · Vendor Advisory
• https://debian.org/security/2023/dsa-5549 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-41752 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-41752 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-41752 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-41752 · Security Note
• https://osv.dev/vulnerability/DSA-5549-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3645-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41752 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU · Vendor Advisory
• https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q · Vendor Advisory