PT-2015-4379
CVE-2014-9749
·
تاريخ النشر
2014-04-24
·
تاريخ التحديث
2018-10-30
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Squid versions 3.4.4 through 3.4.11
Squid versions 3.5.0.1 through 3.5.1
Description
The issue allows remote authenticated users to retain access by leveraging a stale nonce when Digest authentication is used.
Recommendations
For Squid versions 3.4.4 through 3.4.11, update to a version outside of this range to resolve the issue.
For Squid versions 3.5.0.1 through 3.5.1, update to a version outside of this range to resolve the issue.
As a temporary workaround, consider disabling Digest authentication until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾