CVE-2022-47184

Katalog CVE

CVSS 7.5 · High EPSS 1,5%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada apache traffic server, debian linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: 8.0.0 to 9.2.0.

Rincian

Terbit di NVD

14 Juni 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.debian.org/security/2023/dsa-5435 advisory pihak ketiga
• https://lists.apache.org/thread/tns2b4khyyncgs5v5p9y35pobg9z2bvs mailing list
• https://lists.debian.org/debian-lts-announce/2023/06/msg00037.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6GDCBNFDDW6ULW7...
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FGWXNAEEVRUZ5JG...