CVE-2024-23638

A flaw was found in Squid, resulting in a potential denial of service attack targeting Cache Manager error responses. This issue enables a trusted client to execute a denial of service by manipulating the generation of error pages for Client Manager reports.

The identified vulnerability in Squid, leading to a Denial of Service attack against Cache Manager error responses, is considered a moderate issue. While it requires a trusted client for exploitation, the potential impact lies in the ability to disrupt normal functioning by manipulating error pages during the generation of Client Manager reports.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Restrict entry to Cache Manager through Squid's primary access control: http_access deny manager