Apache Traffic Server Vulnerability: Unchecked Return Value Can Retain Privileges

CVE-2024-50306

What is CVE-2024-50306?

An unchecked return value in Apache Traffic Server can lead to privilege retention upon startup, potentially allowing unauthorized actions. This vulnerability impacts versions 9.2.0 to 9.2.5 and 10.0.0 to 10.0.1 of Apache Traffic Server. To mitigate this issue, users are urged to update to version 9.2.6 or 10.0.2, where the problem has been addressed.

References