Количество 21
Количество 21
BDU:2025-13226
Уязвимость конфигурации email_err_data on прокси-сервера Squid, позволяющая нарушителю обойти ограничения безопасности и получить несанкционированный доступ к защищаемой информации
ROS-20251112-01
Множественные уязвимости squid
ALT-PU-2025-14197
ALT-PU-2025-14197: package `squid` update to version 7.3-alt1
ALT-PU-2026-11716
ALT-PU-2026-11716: package `squid` update to version 7.6-alt2
CVE-2025-62168
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.
CVE-2025-62168
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.
CVE-2025-62168
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.
CVE-2025-62168
Squid vulnerable to information disclosure via authentication credential leakage in error handling
CVE-2025-62168
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, ...
SUSE-SU-2025:4099-1
Security update for squid
SUSE-SU-2025:4029-1
Security update for squid
SUSE-SU-2025:4026-1
Security update for squid
SUSE-SU-2025:3902-1
Security update for squid
RLSA-2025:21002
Important: squid security update
RLSA-2025:20935
Important: squid security update
RLSA-2025:19107
Important: squid:4 security update
ELSA-2025-21002
ELSA-2025-21002: squid security update (IMPORTANT)
ELSA-2025-20935
ELSA-2025-20935: squid security update (IMPORTANT)
ELSA-2025-19167
ELSA-2025-19167: squid security update (IMPORTANT)
ELSA-2025-19107
ELSA-2025-19107: squid:4 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-13226 Уязвимость конфигурации email_err_data on прокси-сервера Squid, позволяющая нарушителю обойти ограничения безопасности и получить несанкционированный доступ к защищаемой информации | CVSS3: 10 | 63% Средний | около 1 года назад |
 | ROS-20251112-01 Множественные уязвимости squid | CVSS3: 10 | 11 месяцев назад | |
 | ALT-PU-2025-14197 ALT-PU-2025-14197: package `squid` update to version 7.3-alt1 | CVSS3: 10 | 11 месяцев назад | |
| ALT-PU-2026-11716 ALT-PU-2026-11716: package `squid` update to version 7.6-alt2 | CVSS3: 10 | 2 месяца назад | |
 | CVE-2025-62168 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off. | CVSS3: 10 | 63% Средний | 11 месяцев назад |
 | CVE-2025-62168 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off. | CVSS3: 8.6 | 63% Средний | 11 месяцев назад |
| CVE-2025-62168 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off. | CVSS3: 10 | 63% Средний | 11 месяцев назад |
 | CVE-2025-62168 Squid vulnerable to information disclosure via authentication credential leakage in error handling | CVSS3: 10 | 63% Средний | 11 месяцев назад |
| CVE-2025-62168 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, ... | CVSS3: 10 | 63% Средний | 11 месяцев назад |
 | SUSE-SU-2025:4099-1 Security update for squid | 63% Средний | 11 месяцев назад | |
| SUSE-SU-2025:4029-1 Security update for squid | 63% Средний | 11 месяцев назад | |
| SUSE-SU-2025:4026-1 Security update for squid | 63% Средний | 11 месяцев назад | |
| SUSE-SU-2025:3902-1 Security update for squid | 63% Средний | 11 месяцев назад | |
 | RLSA-2025:21002 Important: squid security update | 63% Средний | 10 месяцев назад | |
| RLSA-2025:20935 Important: squid security update | 63% Средний | 10 месяцев назад | |
| RLSA-2025:19107 Important: squid:4 security update | 63% Средний | 8 месяцев назад | |
| ELSA-2025-21002 ELSA-2025-21002: squid security update (IMPORTANT) | 63% Средний | 10 месяцев назад | |
| ELSA-2025-20935 ELSA-2025-20935: squid security update (IMPORTANT) | 63% Средний | 10 месяцев назад | |
| ELSA-2025-19167 ELSA-2025-19167: squid security update (IMPORTANT) | 63% Средний | 10 месяцев назад | |
| ELSA-2025-19107 ELSA-2025-19107: squid:4 security update (IMPORTANT) | 63% Средний | 11 месяцев назад |
Уязвимостей на страницу