Test Kennung:	1.3.6.1.4.1.25623.1.0.148787
Kategorie:	Web Servers
Titel:	Squid Information Disclosure Vulnerability (GHSA-rcg9-7fqm-83mq, SQUID-2022:1)
Zusammenfassung:	Squid is prone to an information disclosure vulnerability.
Beschreibung:	Summary: Squid is prone to an information disclosure vulnerability. Vulnerability Insight: Due to inconsistent handling of internal URIs Squid is vulnerable to exposure of sensitive information about clients using the proxy. Vulnerability Impact: A trusted client may directly access cache manager information bypassing the manager ACL protection. The available cache manager information contains records of internal network structure, client credentials, client identity and client traffic behaviour. Affected Software/OS: Squid version 4.9 through 4.17 and 5.0.6 through 5.6. Solution: Update to version 5.7 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2022-41317 http://www.squid-cache.org/Versions/v4/changesets/SQUID-2022_1.patch http://www.squid-cache.org/Versions/v5/changesets/SQUID-2022_1.patch https://github.com/squid-cache/squid/security/advisories/GHSA-rcg9-7fqm-83mq https://www.openwall.com/lists/oss-security/2022/09/23/1
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.