First published: Wed Feb 12 2020(Updated: )
Varnish HTTP cache before 3.0.4: ACL bug
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Varnish Cache Project Varnish Cache | <3.0.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-4090 refers to a vulnerability in Varnish HTTP cache before version 3.0.4 where an Access Control List (ACL) bug exists.
The severity of CVE-2013-4090 is high, with a CVSS score of 7.5.
CVE-2013-4090 affects Varnish HTTP cache versions before 3.0.4 by introducing an ACL bug.
To fix CVE-2013-4090, it is recommended to upgrade to Varnish HTTP cache version 3.0.4 or above.
More information about CVE-2013-4090 can be found at the following reference link: [https://www.varnish-cache.org/lists/pipermail/varnish-announce/2013-June/000684.html](https://www.varnish-cache.org/lists/pipermail/varnish-announce/2013-June/000684.html)