← All advisories

Medium severity6.3NVD Advisory· Published Mar 6, 2025· Updated Jun 17, 2026

CVE-2024-56195

CVE-2024-56195

Description

Improper Access Control vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 9.2.0 through 9.2.8, from 10.0.0 through 10.0.3.

Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue.

Affected products

3

Apache/trafficservercpe-rescue3 versions
9.2.0+ 2 more
- (no CPE)range: 9.2.0
- (no CPE)range: 9.2.0-9.2.8, 10.0.0-10.0.3
- cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*range: >=9.0.0,<9.2.9

Patches

Vulnerability mechanics

References

1

lists.apache.org/thread/btofzws2yqskk2n7f01r3l1819x01023nvdMailing ListVendor Advisory

News mentions

0

No linked articles in our index yet.