CVE Catalog
CVE-2014-3624
CriticalSummary
Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT.
Risk Assessment
The organization may be exposed to unauthorized access to resources, potentially leading to data leaks or other serious security incidents.
Recommendation
It is recommended to upgrade Apache Traffic Server to version 5.1.1 or later to mitigate this vulnerability.
Original NVD description (English source)
Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT.