CVE-2022-47184 Apache Traffic Server: The TRACE method can be use to disclose network information

2023-06-1407:42:36

CWE-200

apache

www.cve.org

cve-2022-47184

apache traffic server

vulnerability

sensitive information

network disclosure

0.002 Low

EPSS

Percentile

53.3%

JSON

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: 8.0.0 to 9.2.0.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Traffic Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "9.2.0",
        "status": "affected",
        "version": "8.0.0",
        "versionType": "8.0.0 to 9.2.0"
      }
    ]
  }
]