Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Proxy accepts CONNECT requests to itself
Information
Severity
Severity
Critical
Family
Family
Denial of Service
CVSSv2 Base
CVSSv2 Base
9.3
CVSSv2 Vector
CVSSv2 Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Solution Type
Solution Type
Mitigation
Created
Created
17 years ago
Modified
Modified
4 years ago
Summary
The proxy allows the users to perform repeated CONNECT requests to itself. Note that if the proxy limits the number of connections from a single IP (e.g. acl maxconn with Squid), it is protected against saturation and you may ignore this alert.
Solution
Solution
reconfigure your proxy so that it refuses CONNECT requests to itself.