Bypassing Access Control Lists (ACLs) in Squid Internet Object Cache 1.1.20 through Hexadecimal URL Encoding

Bypassing Access Control Lists (ACLs) in Squid Internet Object Cache 1.1.20 through Hexadecimal URL Encoding

CVE-1999-1273 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.

Learn more about our User Device Pen Test.