Aller au contenu
en Se connecter
Non notée

CVE-2022-23206 In Apache Traffic Control Traffic Ops prior to 6.1.0 or 5.1.6, an unprivileged user who can reach Traffic Ops over HTTPS…

Description

In Apache Traffic Control Traffic Ops prior to 6.1.0 or 5.1.6, an unprivileged user who can reach Traffic Ops over HTTPS can send a specially-crafted POST request to /user/login/oauth to scan a port of a server that Traffic Ops can reach.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache Traffic Control 6.1 premières → < 6.1.0 6.1.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Apache Traffic Control

Les 6 CVE de Apache Traffic Control →
CVE-2025-61581 ** UNSUPPORTED WHEN ASSIGNED ** Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control Non notée CVE-2024-45387 An SQL injection vulnerability in Traffic Ops in Apache Traffic Control = 8.0.0 allows a privileged user with role… 9.9 Critique CVE-2021-43350 An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the… Non notée CVE-2021-42009 An authenticated Apache Traffic Control Traffic Ops user with Portal-level privileges can send a request with a… Non notée
Suivre cette CVE