Test ID:	1.3.6.1.4.1.25623.1.0.141998
Category:	Web Servers
Title:	Apache Traffic Server (ATS) sslheader Plugin Vulnerability
Summary:	sslheaders plugin extracts information from the client certificate and sets;headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the;request in some scenarios.
Description:	Summary: sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. Affected Software/OS: Apache Traffic Server versions 6.x, 7.x and 8.x. Solution: Update to version 7.1.6, 8.0.2 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-11783 BugTraq ID: 107032 http://www.securityfocus.com/bid/107032 https://lists.apache.org/thread.html/4f102f943935476732fb1fb653d687c7b69d29d9792f0d6cf72c505e@%3Cannounce.trafficserver.apache.org%3E
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.