Vulnetix
Try Vulnetix Request Demo
CVE-2016-10002 PUBLISHED

Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.

EPSS 30.07% · 96.6th percentile

Risk Scores

EPSS Score
30.07%
96.6th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSsquid30, 3.3.8-1ubuntu3, 3.3.8-1ubuntu4
Ubuntu:16.04:LTSsquid30, 3.3.8-1ubuntu16, 3.3.8-1ubuntu17

Timeline

References

Open in Interactive Console →