CVEvulnerability
CVE-2021-38161
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-11-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man in the middle attacks. This issue affects Apache Traffic Server 8.0.0 to 8.0.8.
Affected configurations
• apache traffic server (>= 8.0.0 <= 8.0.8)
• debian debian linux 10.0
• debian debian linux 11.0
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164 Mailing List, Patch, Vendor Advisory
- https://www.debian.org/security/2022/dsa-5153 Third Party Advisory
- https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164 Mailing List, Patch, Vendor Advisory
- https://www.debian.org/security/2022/dsa-5153 Third Party Advisory