Description

Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stale nonce, aka "Nonce replay vulnerability."

Remediation

References

CVE-2014-9749

Related Vulnerabilities

PleskLin Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-43784)

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-48010)

Squid Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2213)

WordPress Plugin Calendar Event Multi View Unspecified Vulnerability (1.3.58)

MySQL Other Vulnerability (CVE-2000-0045)

Severity

Medium

Classification

CVE-2014-9749 CWE-264

Tags

Missing Update Known Vulnerabilities