Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ch64-2v27-7pwp

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks.

nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks.

EPSS

Процентиль: 85%
0.02435
Низкий

Дефекты

CWE-613

Связанные уязвимости

ubuntu
около 11 лет назад

nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks.

redhat
больше 11 лет назад

nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks.

nvd
около 11 лет назад

nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks.

debian
около 11 лет назад

nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cach ...

EPSS

Процентиль: 85%
0.02435
Низкий

Дефекты

CWE-613