Test ID:	1.3.6.1.4.1.25623.1.0.148787
Category:	Web Servers
Title:	Squid Information Disclosure Vulnerability (GHSA-rcg9-7fqm-83mq, SQUID-2022:1)
Summary:	Squid is prone to an information disclosure vulnerability.
Description:	Summary: Squid is prone to an information disclosure vulnerability. Vulnerability Insight: Due to inconsistent handling of internal URIs Squid is vulnerable to exposure of sensitive information about clients using the proxy. Vulnerability Impact: A trusted client may directly access cache manager information bypassing the manager ACL protection. The available cache manager information contains records of internal network structure, client credentials, client identity and client traffic behaviour. Affected Software/OS: Squid version 4.9 through 4.17 and 5.0.6 through 5.6. Solution: Update to version 5.7 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-41317 http://www.squid-cache.org/Versions/v4/changesets/SQUID-2022_1.patch http://www.squid-cache.org/Versions/v5/changesets/SQUID-2022_1.patch https://github.com/squid-cache/squid/security/advisories/GHSA-rcg9-7fqm-83mq https://www.openwall.com/lists/oss-security/2022/09/23/1
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.