https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:31:24 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:19107 <p><strong>Affected:</strong> AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel, AlmaLinux:8: squid</p> <p>Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.</p> <p>Security Fix(es):</p> <p>* squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel, AlmaLinux:8: squid</p> <p>Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.</p> <p>Security Fix(es):</p> <p>* squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:19107 https://cve.radiocsirt.org/vuln/bdu:2025-13226 bdu:2025-13226 https://cve.radiocsirt.org/vuln/bdu:2025-13226 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0889 certfr-2025-avi-0889 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0889 https://cve.radiocsirt.org/vuln/euvd-2026-271500 EUVD-2026-271500 https://cve.radiocsirt.org/vuln/euvd-2026-271500 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62168 <p>Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.</p> <p>Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-62168 https://cve.radiocsirt.org/vuln/msrc_cve-2025-62168 msrc_CVE-2025-62168 https://cve.radiocsirt.org/vuln/msrc_cve-2025-62168 https://cve.radiocsirt.org/vuln/oesa-2025-2531 <p><strong>Affected:</strong> openEuler:24.03-LTS: squid</p> <p>Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fix(es):</p> <p>Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: squid</p> <p>Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fix(es):</p> <p>Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2531 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15715-1 <p>squid-7.3-1.1 on GA media</p> <p>squid-7.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15715-1 https://cve.radiocsirt.org/vuln/rhsa-2025:19114 <p>squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling</p> <p>squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling</p> https://cve.radiocsirt.org/vuln/rhsa-2025:19114 https://cve.radiocsirt.org/vuln/suse-su-2025:4029-1 <p>Security update for squid</p> <p>Security update for squid</p> https://cve.radiocsirt.org/vuln/suse-su-2025:4029-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-62168 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: squid3, Ubuntu:Pro:18.04:LTS: squid3, Ubuntu:Pro:20.04:LTS: squid, Ubuntu:22.04:LTS: squid, Ubuntu:24.04:LTS: squid, Ubuntu:25.10: squid</p> <p>Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: squid3, Ubuntu:Pro:18.04:LTS: squid3, Ubuntu:Pro:20.04:LTS: squid, Ubuntu:22.04:LTS: squid, Ubuntu:24.04:LTS: squid, Ubuntu:25.10: squid</p> <p>Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-62168 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2334 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Squid ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Squid ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2334