The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:21002 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

    Security Fix(es):

    * squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error     handling (CVE-2025-62168)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3045 advisory.

    Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP     authentication credentials in error handling allows information disclosure.  . This potentially allows a     remote client to identify security tokens or credentials used internally by a web application using Squid     for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication.
    The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator     mailto links generated by Squid by configuring squid.conf with email_err_data off. (CVE-2025-62168)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19107 advisory.

    libecap     squid     [7:4.15-10.9]
    - Resolves: RHEL-122484 - squid: Squid vulnerable to information disclosure via       authentication credential leakage in error handling (CVE-2025-62168)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:19398 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

    Security Fix(es):

    * squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error     handling (CVE-2025-62168)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:21090 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

    Security Fix(es):

    * squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error     handling (CVE-2025-62168)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:21066 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

    Security Fix(es):

    * squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error     handling (CVE-2025-62168)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the squid package has been released.

The CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1763397982 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
274807	RHEL 10 : squid (RHSA-2025:21002)	Nessus	Red Hat Local Security Checks	11/11/2025	11/11/2025	high
271778	Amazon Linux 2 : squid, --advisory ALAS2-2025-3045 (ALAS-2025-3045)	Nessus	Amazon Linux Local Security Checks	10/28/2025	10/30/2025	high
271800	Oracle Linux 8 : squid:4 (ELSA-2025-19107)	Nessus	Oracle Linux Local Security Checks	10/28/2025	10/28/2025	critical
274476	RHEL 8 : squid:4 (RHSA-2025:19398)	Nessus	Red Hat Local Security Checks	11/7/2025	11/7/2025	high
275152	RHEL 8 : squid:4 (RHSA-2025:21090)	Nessus	Red Hat Local Security Checks	11/12/2025	11/12/2025	high
275154	RHEL 9 : squid (RHSA-2025:21066)	Nessus	Red Hat Local Security Checks	11/12/2025	11/12/2025	high
332687	Photon OS 5.0: Squid PHSA-2025-5.0-91-0690	Nessus	PhotonOS Local Security Checks	8/5/2026	8/5/2026	high
352069	CentOS Linux 6 [TuxCare] Security Update: squid34 (CENTOS6:CLSA-2025:1763397982)	Nessus	CentOS Local Security Checks	9/30/2026	10/1/2026	high

Detections

Analytics

Plugins Search

high

high

critical

high

high

high

high

high