Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-56196 EUVD-2025-6110GHSA-4m6p-f924-hjw4

Apache Traffic Server: ACL is not fully compatible with older versions

Published Mar 6, 2025 · Updated Mar 6, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Traffic Server

Description

Improper Access Control vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 10.0.0 through 10.0.3.

Users are recommended to upgrade to version 10.0.4, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Traffic Server 10.0.0 – ≤ 10.0.3 —

Advisories 1

References