Lucene search
+L

1904 matches found

OSV
OSV
•added 2021/01/11 10:15 a.m.•20 views

CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7AI score
SaveExploits0References1
OSV
OSV
•added 2021/01/11 10:15 a.m.•6 views

DEBIAN-CVE-2020-17509

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7.3AI score0.01814EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2021/01/11 10:15 a.m.•33 views

CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7.1AI score0.02045EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2021/01/11 10:15 a.m.•32 views

CVE-2020-17509

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7.1AI score0.01814EPSS
SaveExploits0References3
Prion
Prion
•added 2021/01/11 10:15 a.m.•21 views

Design/Logic Flaw

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

4.3CVSS7.4AI score0.01814EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2021/01/11 10:15 a.m.•14 views

UBUNTU-CVE-2020-17509

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7.1AI score0.01814EPSS
SaveExploits0References4
OSV
OSV
•added 2021/01/11 10:15 a.m.•15 views

UBUNTU-CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7.1AI score0.02045EPSS
SaveExploits0References4
Prion
Prion
•added 2021/01/11 10:15 a.m.•23 views

Design/Logic Flaw

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

5CVSS7.3AI score0.02045EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2021/01/11 9:40 a.m.•2 views

CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

8.7CVSS0.02045EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2021/01/11 9:40 a.m.•63 views

CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7.3AI score0.02045EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/01/11 9:40 a.m.•57 views

CVE-2020-17509

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7.4AI score0.01814EPSS
SaveExploits0
CVE
CVE
•added 2021/01/11 9:40 a.m.•124 views

CVE-2020-17508

The CVE-2020-17508 entry concerns Apache Traffic Server’s ATS ESI plugin, with a memory disclosure vulnerability. Affected are ATS/Plugin versions: 7.0.0–7.1.11 and 8.0.0–8.1.0. The available data state that upgrading the plugin is required; no additional exploit details, affected file paths, or ...

7.5CVSS7.2AI score0.02045EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2021/01/11 9:40 a.m.•2 views

CVE-2020-17509

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

8.7CVSS0.01814EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2021/01/11 9:40 a.m.•43 views

CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.3AI score0.02045EPSS
SaveExploits0References1
CVE
CVE
•added 2021/01/11 9:40 a.m.•108 views

CVE-2020-17509

CVE-2020-17509 affects Apache Traffic Server (ATS) where the negative cache option is vulnerable to cache poisoning. Affected versions are ATS 7.0.0–7.1.11 and 8.0.0–8.1.0. The underlying issue is linked to the negative cache option enabling a cache poisoning attack; if this option is enabled, up...

7.5CVSS7.3AI score0.01814EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/01/11 9:40 a.m.•43 views

CVE-2020-17509

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.4AI score0.01814EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/11 12:00 a.m.•8 views

CVE-2020-17509: Inconsistent Interpretation of HTTP Requests

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS5.7AI score0.01814EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/11 12:00 a.m.•6 views

CVE-2020-17508: Undefined Security Weakness

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS5.8AI score0.02045EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/12/12 12:00 a.m.•23 views

Apache Traffic Server Information Disclosure Vulnerability

Apache Traffic Server ATS is the United States Apache Apache Software Foundation's set of scalable HTTP proxy and caching server. An information disclosure vulnerability exists in the Apache Traffic Server product, which can be exploited by a local attacker to read memory fragments and obtain...

7.5CVSS5.7AI score0.02045EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/12/09 12:00 a.m.•21 views

Apache Traffic Server Sensitive Information Disclosure Vulnerability

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. A security vulnerability exists in Apache Traffic Server, which can be exploited by an attacker to bypass access restrictions to data via the server's negative cache poisoning ...

7.5CVSS6.5AI score0.01814EPSS
SaveExploits0References1
Rows per page
Query Builder