CVE-2015-5400

Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended…

published September 28, 2015

CVSS
—
EPSS
21%
Percentile
97.5
In the wild
Unconfirmed
What it is

Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20844 · 97.5th percentile
Published
2015-09-28T20:00Z
EPSS history
Timeline
  • 28 SEP 20:00Z
    Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended…
    cvelistv5