varnish: access control bypass
| Package(s): | varnish | CVE #(s): | CVE-2015-8852 | ||||||||||||||||
| Created: | April 22, 2016 | Updated: | July 20, 2016 | ||||||||||||||||
| Description: | From the Debian advisory: Régis Leroy from Makina Corpus discovered that varnish, a caching HTTP reverse proxy, is vulnerable to HTTP smuggling issues, potentially resulting in cache poisoning or bypassing of access control policies. | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||