CVE Vulnerabilities

CVE-2021-38161

Improper Authentication

Published: Nov 03, 2021 | Modified: Oct 25, 2022
CVSS 3.x
8.1
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man in the middle attacks. This issue affects Apache Traffic Server 8.0.0 to 8.0.8.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Traffic_server Apache 8.0.0 (including) 8.0.8 (including)
Trafficserver Ubuntu bionic *
Trafficserver Ubuntu hirsute *
Trafficserver Ubuntu impish *
Trafficserver Ubuntu kinetic *
Trafficserver Ubuntu trusty *
Trafficserver Ubuntu upstream *
Trafficserver Ubuntu xenial *

Potential Mitigations

References