← Back

CVE-2024-56202

nvd nist
Published: Mar 6, 2025Modified: Apr 29, 2025

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Exploitability: 2.8 / Impact: 1.4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Expected Behavior Violation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3. Users are recommended to upgrade to versions 9.2.9 or 10.0.4 or newer, which fixes the issue.

Affected (2)

Apache
1 product
Traffic Server
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Apache
Traffic Server
From 10.0.0 to 10.0.4
Traffic Server
From 9.0.0 to 9.2.9

Related CWEs

CWE-440
Expected Behavior Violation
A feature, API, or function does not perform according to its specification.

References (1)

Source: security@apache.org
Mailing ListVendor Advisory

Timeline

No history available yet.