CVE-2016-10002
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.
Affected (122)
Products: Debian: Debian Linux · Squid Cache: Squid
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.1.10 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.2.0.10 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.3.0.1 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.4.0.1 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.5.0.1 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version 4.0.10 |
References (14)
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Mailing ListPatchThird Party Advisory
Source: cve@mitre.org
MitigationPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationPatchVendor Advisory
Timeline
No history available yet.