Description

Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.

Remediation

References

CVE-2015-5400

Related Vulnerabilities

MySQL CVE-2014-6555 Vulnerability (CVE-2014-6555)

Beego Framework Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2019-16354)

WordPress Plugin Simple Download Monitor Multiple Cross-Site Scripting Vulnerabilities (3.9.4)

phpMyFAQ Other Vulnerability (CVE-2005-3049)

Moodle Cryptographic Issues Vulnerability (CVE-2009-4302)

Severity

Medium

Classification

CVE-2015-5400 CWE-264

Tags

Missing Update Known Vulnerabilities