CVE-2014-3525

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks.

Published: Aug 22, 2014
Updated: Apr 13, 2023
CVE: CVE-2014-3525
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 10
AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
apache / traffic_server	3.1.4	3.1.4.x
apache / traffic_server	2.1.1	2.1.1.x
apache / traffic_server	3.3.3	3.3.3.x
apache / traffic_server	2.1.8	2.1.8.x
apache / traffic_server	2.1.0	2.1.0.x
apache / traffic_server	2.0.1	2.0.1.x
apache / traffic_server	2.1.7	2.1.7.x
apache / traffic_server	4.0.1	4.0.1.x
apache / traffic_server	3.3.0	3.3.0.x
apache / traffic_server	3.1.1	3.1.1.x
apache / traffic_server	3.1.3	3.1.3.x
apache / traffic_server	2.1.5	2.1.5.x
apache / traffic_server	4.2.0	4.2.0.x
apache / traffic_server	3.0.3	3.0.3.x
apache / traffic_server	2.1.3	2.1.3.x
apache / traffic_server	3.0.0	3.0.0.x
apache / traffic_server	2.1.4	2.1.4.x
apache / traffic_server	4.1.0	4.1.0.x
apache / traffic_server	2.1.6	2.1.6.x
apache / traffic_server	4.2.1	4.2.1.x
apache / traffic_server	3.3.1	3.3.1.x
apache / traffic_server	5.0.0	5.0.0.x
apache / traffic_server	3.0.2	3.0.2.x
apache / traffic_server	3.3.4	3.3.4.x
apache / traffic_server	3.1.0	3.1.0.x
apache / traffic_server	3.3.5	3.3.5.x
apache / traffic_server	2.0.0	2.0.0.x
apache / traffic_server	3.1.2	3.1.2.x
apache / traffic_server	2.1.9	2.1.9.x
apache / traffic_server	3.0.1	3.0.1.x
apache / traffic_server	2.0.0-alpha	2.0.0-alpha.x
apache / traffic_server	3.2.0	3.2.0.x
apache / traffic_server	3.0.4	3.0.4.x
apache / traffic_server	2.1.2	2.1.2.x
apache / traffic_server	3.3.2	3.3.2.x

Vulnerability Database

CVE-2014-3525

Deep Security Visibility Without the Complexity