PT-2025-9864 · Apache+1 · Apache Traffic Server+1

Masaori Koshiba · Published 2025-03-05 · Updated 2026-01-23 · CVE-2024-56195

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 9.2.0 through 9.2.8 Apache Traffic Server versions 10.0.0 through 10.0.3

Description The issue is related to Improper Access Control in Apache Traffic Server.

Recommendations For versions 9.2.0 through 9.2.8, upgrade to version 9.2.9. For versions 10.0.0 through 10.0.3, upgrade to version 10.0.4.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-02428

CVE-2024-56195

DSA-5896-1

OESA-2025-1289

OESA-2025-1290

OESA-2026-1197

Affected Products

Apache Traffic Server

Debian

References · 25

• https://ubuntu.com/security/CVE-2024-56195 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1290 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5896-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02428 · Security Note
• https://lists.apache.org/thread/btofzws2yqskk2n7f01r3l1819x01023 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-50306 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38311 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-56202 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-56195 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1197 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-56195 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-56195 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-56195 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1289 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56195 · Security Note