CVE-2020-17509

2021-01-1109:40:20

apache

www.cve.org

0.003 Low

EPSS

Percentile

65.4%

JSON

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.

CNA Affected

[
  {
    "product": "Apache Traffic Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Traffic Server 7.0.0 to 7.1.11, 8.0.0 to 8.1.0"
      }
    ]
  }
]