July 1, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Advisory – CVE-2022-0492 – Linux Kernel Vulnerability
February 7, 2022Rewterz Threat Alert – APT-28 FancyBear – Active IOCs
February 7, 2022Rewterz Threat Advisory – CVE-2022-0492 – Linux Kernel Vulnerability
February 7, 2022Rewterz Threat Alert – APT-28 FancyBear – Active IOCs
February 7, 2022
Severity
Medium
Analysis Summary
CVE-2022-23206
Apache Traffic Control could allow a remote authenticated attacker to obtain sensitive information, caused by improper access control by the Traffic Ops module. By sending a specially-crafted HTTP POST request to /user/login/oauth, an attacker could <exploit this vulnerability to scan a port of a server that Traffic Ops can reach, and use this information to launch further attacks against the affected system.
Impact
- Information Disclosure
Indicators of Compromise
CVE
- CVE-2022-23206
Affected Vendors
Apache
Affected Products
- Apache Traffic Control 5.1.5
- Apache Traffic Control 6.0.2
Remediation
Upgrade to the latest version of Traffic Control Traffic Ops, available from the Apache Web site.