Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.00155
Percentile: 0.37028

CVSS Scoring

Affected Products

• cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.5.stable8:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.5.stable9:*:*:*:*:*:*:*

← Back to Home