Test Kennung:	1.3.6.1.4.1.25623.1.0.812525
Kategorie:	Web Servers
Titel:	Apache Traffic Server (ATS) Host Header and Line Folding Security Bypass Vulnerability
Zusammenfassung:	Apache Traffic Server is prone to a security bypass vulnerability.
Beschreibung:	Summary: Apache Traffic Server is prone to a security bypass vulnerability. Vulnerability Insight: The flaw exists due to an error in Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used. Vulnerability Impact: Successful exploitation will allow remote attackers to gain unauthorized access to certain resources. This may aid in further attacks. Affected Software/OS: Apache Traffic Server 6.2.0 and prior. Apache Traffic Server 7.0.0 Solution: Upgrade to 6.2.2, 7.1.2 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-5660 Debian Security Information: DSA-4128 (Google Search) https://www.debian.org/security/2018/dsa-4128 https://lists.apache.org/thread.html/22d84783d94c53a5132ec89f002fe5165c87561a9428bcb6713b3c98@%3Cdev.trafficserver.apache.org%3E
Copyright	Copyright (C) 2018 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.