Lucene search
Veracode Vulnerability DatabaseVERACODE:37281HistorySep 26, 2022 - 11:57 p.m.
Information Disclosure
2022-09-2623:57:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
squid
information disclosure
vulnerability
cache manager
file system
acl protection
0.001 Low
EPSS
Percentile
43.1%
squid is vulnerable to information disclosure. The vulnerability exits due to inconsistent handling of internal URIs, which allows an attacker to gain access to cache manager information in the file system via bypassing the manager ACL protection.
References
git://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2022-41317
www.squid-cache.org/Versions/v4/changesets/SQUID-2022_1.patch
www.squid-cache.org/Versions/v5/changesets/SQUID-2022_1.patch
bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-41317
bugzilla.suse.com/show_bug.cgi?id=CVE-2022-41317
github.com/squid-cache/squid/security/advisories/GHSA-rcg9-7fqm-83mq
security-tracker.debian.org/tracker/CVE-2022-41317
www.openwall.com/lists/oss-security/2022/09/23/1
Related
ubuntucve
ubuntucve
CVE-2022-41317
2022-09-23 00:00:00
debiancve
debiancve
CVE-2022-41317
2022-12-25 19:15:10
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:3596-1)
2022-10-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3531-1)
2022-10-07 00:00:00
cvelist
cvelist
CVE-2022-41317
2022-12-25 00:00:00
nessus
nessus
Amazon Linux 2 : squid (ALASSQUID4-2023-002)
2023-09-27 00:00:00
FreeBSD : squid -- Exposure of sensitive information in cache manager (f9ada0b5-3d80-11ed-9330-080027f5fec9)
2022-09-26 00:00:00
RHEL 8 : squid (Unpatched Vulnerability)
2024-05-11 00:00:00
freebsd
freebsd
squid -- Exposure of sensitive information in cache manager
2022-04-17 00:00:00
nvd
nvd
CVE-2022-41317
2022-12-25 19:15:10
redhatcve
redhatcve
CVE-2022-41317
2022-09-26 09:49:28
cve
cve
CVE-2022-41317
2022-12-25 19:15:10
osv
osv
CVE-2022-41317
2022-12-25 19:15:10
squid - security update
2022-10-19 00:00:00
squid - security update
2022-10-13 00:00:00
redos
redos
ROS-20230112-01
2023-01-12 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-12-25 19:15:00
alpinelinux
alpinelinux
CVE-2022-41317
2022-12-25 19:15:10
debian
debian
[SECURITY] [DSA 5258-1] squid security update
2022-10-19 08:18:22
[SECURITY] [DLA 3151-1] squid security update
2022-10-12 19:31:44
photon
photon
Important Photon OS Security Update - PHSA-2023-0310
2023-01-09 00:00:00
Important Photon OS Security Update - PHSA-2023-0513
2023-01-10 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0513
2023-01-10 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: squid-5.7-1.fc35
2022-10-05 01:05:06
[SECURITY] Fedora 36 Update: squid-5.7-1.fc36
2022-10-05 01:01:55
[SECURITY] Fedora 37 Update: squid-5.7-1.fc37
2022-10-04 15:13:48
suse
suse
Security update for squid (important)
2022-10-06 00:00:00
Security update for squid (important)
2022-10-17 00:00:00
mageia
mageia
Updated squid packages fix security vulnerability
2022-10-01 20:48:24
ubuntu
ubuntu
Squid vulnerabilities
2022-09-26 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2273
2023-10-22 06:19:50
amazon
amazon
Medium: squid
2023-02-17 00:11:00
Medium: squid
2023-02-17 00:02:00