CVE-2012-2213 : Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary

Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. NOTE: this issue might not be reproducible, because the researcher is unable to provide a squid.conf file for a vulnerable system, and the observed behavior is consistent with a squid.conf file that was (perhaps inadvertently) designed to allow access based on a "req_header Host" acl regex that matches www.uol.com.br

Published 2012-04-28 10:06:13

Updated 2024-04-11 00:48:57

Source MITRE

View at NVD, CVE.org

Threat overview for CVE-2012-2213

Top countries where our scanners detected CVE-2012-2213

Top open port discovered on systems with this issue 3128

IPs affected by CVE-2012-2213 54,672

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2012-2213!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2012-2213

Probability of exploitation activity in the next 30 days: 0.25%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 64 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2012-2213

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

CWE ids for CVE-2012-2213

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2012-2213

Products affected by CVE-2012-2213