Intrusion PreventionApache.Traffic.Server.ESI.Cookie.Header.Information.Disclosure
Description
This indicates an attack attempt to exploit an Information Disclosure Vulnerability in Apache Software Foundation Traffic Server.
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted request. An attacker can exploit this to disclose sensitive information on the affected machine via a crafted request.
Affected Products
Apache Software Foundation Traffic Server prior to 6.2.3
Apache Software Foundation Traffic Server prior to 7.1.4
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor:
https://lists.apache.org/thread.html/cc7aa2ce1c6f4fe0c6bfef517763cdaad30ec7bcb0115b73f73f3c01@%3Cusers.trafficserver.apache.org%3E
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2018-10-16 | 13.473 | Default_action:pass:drop |
| ID | 46899 |
| Created | Sep 18, 2018 |
| Updated | Sep 23, 2020 |
| Risk |
|
| CVE ID | CVE-2018-8040 |
| Exploit Prediction Score | 6.83% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Apache |