Test Kennung:	1.3.6.1.4.1.25623.1.0.142629
Kategorie:	Web Servers
Titel:	Squid Security Update Advisory (SQUID-2018:4)
Zusammenfassung:	Squid is prone to a cross-site scripting vulnerability to incorrect input; handling when generating HTTPS response messages about TLS errors.
Beschreibung:	Summary: Squid is prone to a cross-site scripting vulnerability to incorrect input handling when generating HTTPS response messages about TLS errors. Vulnerability Insight: This problem allows a malicious HTTPS server to trigger error page delivery to a client and also inject arbitrary HTML code into the resulting error response. This problem is limited to Squid built with TLS / SSL support. Affected Software/OS: Squid proxy versions 3.1.12.1 through 3.1.23, 3.2.0.4 through 3.5.28 and 4.x through 4.3. Solution: Update to version 4.4 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-19131 http://www.squid-cache.org/Advisories/SQUID-2018_4.txt http://www.squid-cache.org/Versions/v5/changesets/squid-5-6feeb15ff312f3e145763adf8d234ed6a0b3f11d.patch https://github.com/squid-cache/squid/pull/306
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.