✕
Request a Demo
Rewterz
Rewterz Threat Advisory – CVE-2022-0492 – Linux Kernel Vulnerability
February 7, 2022
Rewterz
Rewterz Threat Alert – APT-28 FancyBear – Active IOCs
February 7, 2022

Rewterz Threat Advisory – CVE-2022-23206 – Apache Traffic Control Traffic Ops module Vulnerability

Severity

Medium

Analysis Summary

CVE-2022-23206

Apache Traffic Control could allow a remote authenticated attacker to obtain sensitive information, caused by improper access control by the Traffic Ops module. By sending a specially-crafted HTTP POST request to /user/login/oauth, an attacker could <exploit this vulnerability to scan a port of a server that Traffic Ops can reach, and use this information to launch further attacks against the affected system.

Impact

  • Information Disclosure

Indicators of Compromise

CVE

  • CVE-2022-23206

Affected Vendors

Apache

Affected Products

  • Apache Traffic Control 5.1.5
  • Apache Traffic Control 6.0.2

Remediation

Upgrade to the latest version of Traffic Control Traffic Ops, available from the Apache Web site.

https://trafficcontrol.apache.org/