Summary
Squid encountered an issue when handling a URN request; a corresponding HTTP request was made. This HTTP request doesn't go through the access checks that incoming HTTP requests go through. This causes all access checks to be bypassed and allows access to restricted HTTP servers; e.g., an attacker can connect to HTTP servers that only listen on localhost.
Products Potentially Affected
| OS/Product |
Exposure |
| IQ Engine (HiveOS) |
Yes |
Repair Recommendations
- IQ Engine (HiveOS): Pending.
Please see the full security advisory article here for more details and updates.
