NetSight
IP …
high7.5

CVE-2016-10002

Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 th…

Impact

Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 8.0
Squid-CacheSquid
Versions 3.1.10, 3.1.11, 3.1.12, 3.1.14, 3.1.15, 3.1.16

Weakness classification

CWE-200

References