Test ID:	1.3.6.1.4.1.25623.1.0.143191
Category:	Web Servers
Title:	Squid Multiple Security Update Advisories (SQUID-2019:9, SQUID-2019:11)
Summary:	Squid is prone to multiple vulnerabilities.
Description:	Summary: Squid is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2019-18677: Cross-Site Request Forgery issue in HTTP Request processing - CVE-2019-18679: Information Disclosure issue in HTTP Digest Authentication Affected Software/OS: Squid versions 2.x, 3.x through 3.5.28 and 4.x through 4.8. Solution: Update to version 4.9 or later. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-18677 Debian Security Information: DSA-4682 (Google Search) https://www.debian.org/security/2020/dsa-4682 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UEMOYTMCCFWK5NOXSXEIH5D2VGWVXR67/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTM74TU2BSLT5B3H4F3UDW53672NVLMC/ https://github.com/squid-cache/squid/pull/427 https://lists.debian.org/debian-lts-announce/2019/12/msg00011.html https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html https://usn.ubuntu.com/4213-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-18679 https://security.gentoo.org/glsa/202003-34 https://github.com/squid-cache/squid/pull/491
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.