CVE-2021-44759

Improper Authentication vulnerability in TLS origin validation of Apache Traffic Server allows an attacker to create a man in the middle attack. This issue affects Apache Traffic Server 8.0.0 to 8.1.0.

Score

CVSS 3.1 8.1 High

Status

Modified - security@apache.org

Published

2022-03-23

Last modified

2024-08-04

Weaknesses

CWE-287

Affected products

• Traffic Server (Apache)
• Apache Traffic Server (Apache Software Foundation)
• Debian Linux (Debian)

References

• https://lists.apache.org/thread/zblwzcfs9ryhwjr89wz4osw55pxm6dx6
• https://www.debian.org/security/2022/dsa-5153