CVEvulnerability

CVE-2015-3455

2.6 LOW Published 2015-05-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-05-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Weaknesses
CWE-20

Description

Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.

Affected configurations

• oracle linux 7 • oracle solaris 11.2 • squid-cache squid 3.2.0.1 • squid-cache squid 3.2.0.2 • squid-cache squid 3.2.0.3 • squid-cache squid 3.2.0.4 • squid-cache squid 3.2.0.5 • squid-cache squid 3.2.0.6 • squid-cache squid 3.2.0.7 • squid-cache squid 3.2.0.8 • squid-cache squid 3.2.0.9 • squid-cache squid 3.2.0.10 • squid-cache squid 3.2.0.11 • squid-cache squid 3.2.0.12 • squid-cache squid 3.2.0.13 • squid-cache squid 3.2.0.14 • squid-cache squid 3.2.0.15 • squid-cache squid 3.2.0.16 • squid-cache squid 3.2.0.17 • squid-cache squid 3.2.0.18 • squid-cache squid 3.2.0.19 • squid-cache squid 3.2.1 • squid-cache squid 3.2.2 • squid-cache squid 3.2.3 • squid-cache squid 3.2.4 • squid-cache squid 3.2.5 • squid-cache squid 3.2.6 • squid-cache squid 3.2.7 • squid-cache squid 3.2.8 • squid-cache squid 3.2.9 • squid-cache squid 3.2.10 • squid-cache squid 3.2.11 • squid-cache squid 3.2.12 • squid-cache squid 3.2.13 • squid-cache squid 3.3.0 • squid-cache squid 3.3.0.1 • squid-cache squid 3.3.0.2 • squid-cache squid 3.3.0.3 • squid-cache squid 3.3.1 • squid-cache squid 3.3.2 • squid-cache squid 3.3.3 • squid-cache squid 3.3.4 • squid-cache squid 3.3.5 • squid-cache squid 3.3.6 • squid-cache squid 3.3.7 • squid-cache squid 3.3.8 • squid-cache squid 3.3.9 • squid-cache squid 3.3.10 • squid-cache squid 3.3.11 • squid-cache squid 3.3.12 • squid-cache squid 3.3.13 • squid-cache squid 3.4.0.1 • squid-cache squid 3.4.0.2 • squid-cache squid 3.4.0.3 • squid-cache squid 3.4.1 • squid-cache squid 3.4.2 • squid-cache squid 3.4.3 • squid-cache squid 3.4.4 • squid-cache squid 3.4.5 • squid-cache squid 3.4.6 … and 13 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References