Vulnerabilities > Squid Cache > Squid > 3.5.20

DATE CVE VULNERABILITY TITLE RISK
2017-01-27 CVE-2016-10003 Incorrect Comparison vulnerability in Squid-Cache Squid
Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.
network
low complexity
squid-cache CWE-697
7.5
2017-01-27 CVE-2016-10002 Information Exposure vulnerability in multiple products
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients.
network
low complexity
debian squid-cache CWE-200
7.5