What’s Vulnerable › Vulnerabilities
CVE-2014-3624
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 3.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-10-30 · updated 2026-06-17
- Weakness: CWE-284
Description
Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT.
Affected products
References
- http://mail-archives.apache.org/mod_mbox/www-announce/201411.mbox/%3C20141101231749.2E3561043F%40minotaur.apache.org%3E
- http://www.securityfocus.com/bid/101630
- https://issues.apache.org/jira/browse/TS-2677
- http://mail-archives.apache.org/mod_mbox/www-announce/201411.mbox/%3C20141101231749.2E3561043F%40minotaur.apache.org%3E
- http://www.securityfocus.com/bid/101630
- https://issues.apache.org/jira/browse/TS-2677
Get alerted when CVE-2014-3624 or the next vulnerability affects your stack