Description
In Apache Traffic Control Traffic Ops prior to 6.1.0 or 5.1.6, an unprivileged user who can reach Traffic Ops over HTTPS can send a specially-crafted POST request to /user/login/oauth to scan a port of a server that Traffic Ops can reach.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache Traffic Control | Traffic Ops – < 6.1.0 | 6.1.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/apache/trafficcontrol | >= 6.0.0, < 6.1.0 | 6.1.0 | GHSA-wp47-9r3h-xfgq |
| Go | github.com/apache/trafficcontrol | < 5.1.6 | 5.1.6 | GHSA-wp47-9r3h-xfgq |
| Go | github.com/apache/trafficcontrol | < 5.1.6+incompatible · >= 6.0.0+incompatible, < 6.1.0+incompatible | 5.1.6+incompatible, 6.1.0+incompatible | GO-2022-0585 |