Lucene search

CVE-2019-12523

🗓️ 26 Nov 2019 17:10:15Reported by mitreType

An issue in Squid before 4.9 allows bypass of access checks, enabling access to restricted HTTP servers

Reporter	Title	Published	Views	Family All 81
Cvelist	CVE-2019-12523	26 Nov 201916:39	–	cvelist
NVD	CVE-2019-12523	26 Nov 201917:15	–	nvd
Hacker One	Internet Bug Bounty: URN Request bypass ACL Checks	19 Mar 202018:17	–	hackerone
Veracode	Authorization Bypass	21 Sep 202006:40	–	veracode
Debian CVE	CVE-2019-12523	26 Nov 201917:15	–	debiancve
UbuntuCve	CVE-2019-12523	26 Nov 201900:00	–	ubuntucve
UbuntuCve	CVE-2019-18676	26 Nov 201900:00	–	ubuntucve
OSV	CVE-2019-12523	26 Nov 201917:15	–	osv
OSV	squid - security update	8 May 202000:00	–	osv
OSV	Red Hat Security Advisory: squid:4 security, bug fix, and enhancement update	16 Sep 202404:22	–	osv

Nvd

Node

squid-cache squidRange3.0–3.5.28

squid-cache squidRange4.0–4.8

Node

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch19.04

canonical ubuntu_linuxMatch19.10

Node

fedoraproject fedoraMatch30

fedoraproject fedoraMatch31

Node

opensuse leapMatch15.0

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

canonical ubuntu_linuxMatch16.04esm

canonical ubuntu_linuxMatch18.04lts

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html
usn	www.usn.ubuntu.com/4213-1/
debian	www.debian.org/security/2020/dsa-4682
lists	www.lists.debian.org/debian-lts-announce/2020/07/msg00009.html
bugzilla	www.bugzilla.suse.com/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEMOYTMCCFWK5NOXSXEIH5D2VGWVXR67/
squid-cache	www.squid-cache.org/Advisories/SQUID-2019_8.txt
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTM74TU2BSLT5B3H4F3UDW53672NVLMC/
usn	www.usn.ubuntu.com/4446-1/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Nov 2019 17:15Current

9.1High risk

Vulners AI Score9.1

CVSS26.4

CVSS39.1

EPSS0.009