PT-2023-3360 · Apache · Apache Traffic Server

Masakazu Kitajo · Published 2023-06-13 · Updated 2024-10-09 · CVE-2023-33933

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 9.2.0

Description The issue is related to insufficient protection of service data, which may allow a remote attacker to gain unauthorized access to confidential information.

Recommendations 8.x users should upgrade to 8.1.7 or later versions 9.x users should upgrade to 9.2.1 or later versions

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2023-03516

CVE-2023-33933

DLA-3475-1

DSA-5435-1

DSA-5435-2

OESA-2023-1972

OESA-2023-1973

OESA-2023-1974

Affected Products

Apache Traffic Server

References · 39

• https://osv.dev/vulnerability/DLA-3475-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30631 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/6GDCBNFDDW6ULW7CACJCPENI7BVDHM5O · Vendor Advisory
• https://security-tracker.debian.org/tracker/DLA-3475-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33933 · Security Note
• https://ubuntu.com/security/CVE-2023-33933 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03516 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-33933 · Security Note
• https://bdu.fstec.ru/vul/2023-03413 · Security Note
• https://bdu.fstec.ru/vul/2023-03423 · Security Note
• https://security-tracker.debian.org/tracker/DSA-5435-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-5435-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47184 · Security Note
• https://lists.apache.org/thread/tns2b4khyyncgs5v5p9y35pobg9z2bvs · Vendor Advisory
• https://debian.org/security/2023/dsa-5435 · Vendor Advisory