imPC@ndo IT

Tracker / CVE-2020-17509

CVE-2020-17509

High 7.5

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.

Affected products and versions

apache traffic_server · 6.0.0 → 6.2.3
apache traffic_server · 7.0.0 → 7.1.10
apache traffic_server · 8.0.0 → 8.0.7

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References