VULNERABILITY INTELLIGENCE
CVE-2014-9749
CVSS score4 MEDIUM
EPSS probability11.44%
CISA KEVNot currently listed
Published2015-11-06
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:N/I:P/A:N
Description
Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stale nonce, aka "Nonce replay vulnerability."