b2b-daily
Home | IT | Cyber Security

Critical SQL Injection Flaw Patched in Apache Traffic Control Update

Avatar photo
by Tailor Jackson
December 26, 2024
Critical SQL Injection Flaw Patched in Apache Traffic Control Update

In a significant effort to address a critical security flaw, the Apache Software Foundation (ASF) has released a patch for a vulnerability in Apache Traffic Control, an open-source Content Delivery Network (CDN) project. This vulnerability, identified as CVE-2024-45387, has been assigned an alarming severity score of 9.9 out of 10 on the Common Vulnerability Scoring System (CVSS). The flaw allows a privileged user with roles such as ‘admin,’ ‘federation,’ ‘operations,’ ‘portal,’ or ‘steering’ to execute arbitrary SQL commands in the database through a specially crafted PUT request. The discovery was made by Yuan Luo from Tencent YunDing Security Lab, prompting a response from ASF to mitigate the risk.

In response to the identified threat, ASF promptly issued a patch included in the updated version 8.0.2 of Apache Traffic Control. The swift action was crucial to secure the framework against potential malicious exploitation. The nature of the flaw enables those with specific roles more control than intended, compromising the database’s integrity. Such a severe vulnerability underscores the importance of maintaining updated software systems and vigilant security practices within organizations relying on Apache Traffic Control for their content delivery needs. The update to version 8.0.2 is strongly advised for all users to safeguard their systems effectively.

Alongside the fix for Apache Traffic Control, ASF has recently addressed other critical security issues within its ecosystem. This includes an authentication bypass flaw in Apache HugeGraph-Server, identified as CVE-2024-43441 and resolved in version 1.5.0. Additionally, a remote code execution vulnerability found in Apache Tomcat, CVE-2024-56337, has been rectified. These updates reflect ASF’s ongoing commitment to enhancing the security and resilience of its software offerings.

Users are urged to swiftly upgrade their Apache Traffic Control installations to the latest version 8.0.2, ensure Apache HugeGraph-Server is updated to version 1.5.0, and verify their Apache Tomcat installations are current. The persistent emergence of security vulnerabilities highlights the necessity for continuous vigilance and timely software updates to protect against evolving cybersecurity threats. Proactive measures and attention to security advisories are essential in maintaining robust defenses against potential exploits.

Information Security

Explore more

How to Choose the Best Enterprise Deployment Strategy
August 14, 2026

The difference between a seamless software update and a catastrophic system failure often hinges on a choice made months before the first line of code ever reaches the production server. For large-scale organizations, the act of releasing software has evolved from a simple file transfer into a sophisticated exercise in risk mitigation and architectural orchestration. In the current landscape of

Production-Safe Testing Closes Critical Gaps in DevSecOps
August 14, 2026

High-speed software delivery pipelines have transformed modern business operations, but they have also created a dangerous illusion that security checks performed before a release are sufficient to protect a company against the chaos of the live web. This misconception leads many organizations to focus their entire security budget on the early stages of development, treating the moment of deployment as

JD.com Opens Seoul Office to Streamline Korean Exports
August 14, 2026

A Strategic Leap: The Pulse of Asian Commerce A physical storefront in Seoul now serves as the vital bridge for South Korean manufacturers who are desperate to tap into the insatiable appetite of millions of Chinese digital shoppers. The era of trade stagnation officially shifted recently, signaled by a sudden surge in consumer goods exports reaching $3.44 billion in the

Digital Innovation Transforms APAC Cross-Border Payments
August 14, 2026

A massive financial migration is currently underway as the Asia-Pacific region solidifies its role as the primary engine of the global economy, moving value across borders at a speed and scale previously thought impossible. This shift is not merely a technical update but a fundamental reimagining of how capital flows through the veins of international commerce. As the world watches,

AsiaPay and McDonald’s Vietnam Partner for Digital Payments
August 14, 2026

The rhythmic tapping of fingers on glass screens has replaced the familiar rustle of paper bills as Vietnam’s urban dining landscape undergoes a rapid technological evolution. In the heart of bustling Ho Chi Minh City and Hanoi, the Golden Arches are no longer just symbols of quick meals but hubs of high-speed financial interaction. This shift reflects a society where