CVE-2018-11783
CVE-2018-11783
This page contains facts from public vulnerability sources. Check the original advisory before updating.
sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 to 8.0.1.
CVSS 7.5 · High · EPSS 1.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
apache traffic server
- Versions
- Apache Traffic Server 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, 8.0.0 to 8.0.1: Affected
No fix published
trafficserver Debian:12
- Affected ranges
- ECOSYSTEM: < 8.0.2+ds-1
Update to 8.0.2+ds-1
trafficserver Ubuntu:16.04:LTS
- Versions
- 5.3.0-2ubuntu1
- 5.3.0-2ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
trafficserver Ubuntu:18.04:LTS
- Versions
- 7.0.0-5
- 7.1.2+ds-2
- 7.1.2+ds-2build1
- 7.1.2+ds-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published