Authorization Bypass

🗓️ 27 Jan 2021 04:23:04Reported by Veracode Vulnerability DatabaseType

github.com/apache/trafficcontrol vulnerability authorization bypass in mid tier cache ip_allow.config file

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2020-17522	26 Jan 202120:36	–	circl
CNNVD	Apache Traffic Control 安全漏洞	26 Jan 202100:00	–	cnnvd
CNVD	Apache Traffic Control Access Control Error Vulnerability	29 Jan 202100:00	–	cnvd
CVE	CVE-2020-17522	26 Jan 202112:42	–	cve
Cvelist	CVE-2020-17522	26 Jan 202112:42	–	cvelist
EUVD	EUVD-2021-1372	7 Oct 202500:30	–	euvd
Github Security Blog	Cache Manipulation Attack in Apache Traffic Control	18 Jun 202122:04	–	github
GitLab Advisory Database	Incorrect Permission Assignment for Critical Resource	26 Jan 202100:00	–	gitlab
GitLab Advisory Database	Incorrect Permission Assignment for Critical Resource	16 Dec 202100:00	–	gitlab
NVD	CVE-2020-17522	26 Jan 202118:15	–	nvd

Vulners

Node

apache github.com/apache/trafficcontrolRangeRELEASE-3.0.0-RC0–RELEASE-3.1.0go

apache github.com/apache/trafficcontrolRangeRELEASE-4.0.0-RC0–RELEASE-4.1.0go

Source	Link
lists	www.lists.apache.org/thread.html/r3de212a3da73bcf98fa2db7eafb75b2eb8e131ff466e6efc4284df09%40%3Cdev.trafficcontrol.apache.org%3E
github	www.github.com/apache/trafficcontrol/commit/817a702a9de6169c86e30cd70304af380a8e9dc6
lists	www.lists.apache.org/thread.html/r3c675031ac220b5eae64a9c84a03ee60045c6045738607dca4a96cb8%40%3Ccommits.trafficcontrol.apache.org%3E
lists	www.lists.apache.org/thread.html/r3c675031ac220b5eae64a9c84a03ee60045c6045738607dca4a96cb8@%3Ccommits.trafficcontrol.apache.org%3E
lists	www.lists.apache.org/thread.html/rc8bfd7d4f71d61e9193efcd4699eccbab3c202ec1d75ed9d502f08bf%40%3Ccommits.trafficcontrol.apache.org%3E
lists	www.lists.apache.org/thread.html/rc8bfd7d4f71d61e9193efcd4699eccbab3c202ec1d75ed9d502f08bf@%3Ccommits.trafficcontrol.apache.org%3E

07 Nov 2023 23:04Current

4.8Medium risk

Vulners AI Score4.8

CVSS 25

CVSS 3.15.8

EPSS0.02162