Information Disclosure

trafficserver is vulnerable to information disclosure. The sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin, however the plugin does not strip the headers from the request in some scenarios, resulting in the disclosure of confidential information.