Skip to content
OpenAdvisories

Product · Apache

Traffic Control

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-12405

    Improper Authentication in Apache Traffic Control

    Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as …

    Apache Traffic Control github.com/apache/trafficcontrol Go