CVE-2021-38161

CVE-2021-38161: Not validating origin TLS certificate

Vendor Apache Software Foundation
Product Apache Traffic Server
Weakness CWE-287 · Improper authentication
Published November 3, 2021
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man in the middle attacks. This issue affects Apache Traffic Server 8.0.0 to 8.0.8.

Key dates

02Disclosure timeline

November 3, 2021 CVE published
August 4, 2024 Record updated