Description

Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.

Remediation

References

CVE-2015-5400

Related Vulnerabilities

WordPress Plugin GeoDirectory-WordPress Business Directory and Classified Ads Listings SQL Injection (2.2.23)

MySQL CVE-2020-14597 Vulnerability (CVE-2020-14597)

Apache 2.x version older than 2.0.49

WordPress Plugin Coming Soon Page & Maintenance Mode Cross-Site Request Forgery (1.7.8)

WordPress Plugin All-In-One Security (AIOS)-Security and Firewall SQL Injection (3.9.0)

Severity

Medium

Classification

CVE-2015-5400 CWE-264

Tags

Missing Update Known Vulnerabilities