Unrated

Apache Traffic Server: Intercept plugins are not access controlled

CVE-2024-56195 First seen on SecPulse Mar 6, 2025

Fix status by distribution

Fixed packages published by each distribution for this CVE

Original description The description as published by the source.

Improper Access Control vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 9.2.0 through 9.2.8, from 10.0.0 through 10.0.3.

Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

NVD OSV