CVE-2020-15049

An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or an uncommon shell whitespace...

CVE-2020-15049

An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or an uncommon shell whitespace...

Design/Logic Flaw

An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or an uncommon shell whitespace...

CVE-2020-15049

An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or an uncommon shell whitespace...

CVE-2020-15049

An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or an uncommon shell whitespace...

PT-2020-3689

Name of the Vulnerable Software and Affected Versions Squid versions prior to 4.12 Squid versions 5.x prior to 5.0.3 Description An issue in the http/ContentLengthInterpreter.cc component of Squid allows for a Request Smuggling and Poisoning attack against the HTTP cache. This can be achieved by...

CVE-2020-15049: Inconsistent Interpretation of HTTP Requests

An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or an uncommon shell whitespace...

Denial Of Service (DoS)

github.com/hashicorp/consul is vulnerable to denial of service. The DNS and HTTP cache feature allows an attacker to cause a denial of service condition in the application...

CVE-2019-11244

A flaw was found in kubectl that leaves http-cache files with read/write permissions for any user. In conjunction with a non-default value for --cache-dir, this may lead to the cache content being placed in a location accessible to other users on the system. Mitigation Do not use --cache-dir, or...

CVE-2013-4090

Varnish HTTP cache before 3.0.4: ACL bug...

CVE-2013-4090

Varnish HTTP cache before 3.0.4: ACL bug...

CVE-2013-4090

Varnish HTTP cache before 3.0.4: ACL bug...

CVE-2013-4090

Varnish HTTP cache before 3.0.4: ACL bug...

CVE-2013-4090

CVE-2013-4090 concerns the Varnish HTTP cache before 3.0.4, due to an ACL bug in the access control logic. Affected component is the Varnish ACL handling in versions prior to 3.0.4. The practical impact is an integrity issue (I:H in CVSS v3.1) with potentially improper access control, as indicate...

CVE-2013-4090

Varnish HTTP cache before 3.0.4: ACL bug...

CVE-2013-4090

Varnish HTTP cache before 3.0.4: ACL bug...

PT-2020-7478 · Varnish · Varnish Http Cache

Name of the Vulnerable Software and Affected Versions: Varnish HTTP cache versions prior to 3.0.4 Description: The issue is related to an ACL bug in the Varnish HTTP cache. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents wher...

kubernetes: Schema info written with world-writeable permissions when cached

A flaw was found in kubectl that leaves http-cache files with read/write permissions for any user. In conjunction with a non-default value for --cache-dir, this may lead to the cache content being placed in a location accessible to other users on the system...

CVE-2019-4216

IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM X-Force ID: 159187...

Design/Logic Flaw

IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM X-Force ID: 159187...