VULNERABILITY INTELLIGENCE

CVE-2021-38161

CVSS score8.1 HIGH

EPSS probability1.95%

CISA KEVNot currently listed

Published2021-11-03

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man in the middle attacks. This issue affects Apache Traffic Server 8.0.0 to 8.0.8.

Weakness classification

security@apache.org: CWE-287
nvd@nist.gov: CWE-287

Primary references

security@apache.org — Mailing List, Patch, Vendor Advisory
security@apache.org — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory