Security Advisory

CVE-2016-10002

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-01-27 17:00:00

Last updated 2024-08-06 03:07:31

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.

← Browse all CVEs View on cve.org ↗