CVE-2011-4968

Опубликовано: 19 нояб. 2019

Источник: nvd

CVSS3: 4.8

CVSS2: 5.8

EPSS Низкий

Описание

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)

Ссылки

http://www.openwall.com/lists/oss-security/2013/01/03/8
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/57139
Third Party Advisory
VDB Entry
https://access.redhat.com/security/cve/cve-2011-4968
Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4968
Issue Tracking
Patch
Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-4968
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80952
Third Party Advisory
VDB Entry
https://security-tracker.debian.org/tracker/CVE-2011-4968
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/01/03/8
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/57139
Third Party Advisory
VDB Entry
https://access.redhat.com/security/cve/cve-2011-4968
Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4968
Issue Tracking
Patch
Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-4968
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80952
Third Party Advisory
VDB Entry
https://security-tracker.debian.org/tracker/CVE-2011-4968
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:f5:nginx:0.7.61:*:*:*:*:*:*:*

cpe:2.3:a:f5:nginx:0.7.62:*:*:*:*:*:*:*

cpe:2.3:a:f5:nginx:0.7.64:*:*:*:*:*:*:*

cpe:2.3:a:f5:nginx:0.7.65:*:*:*:*:*:*:*

cpe:2.3:a:f5:nginx:0.7.66:*:*:*:*:*:*:*

cpe:2.3:a:f5:nginx:0.8.33:*:*:*:*:*:*:*

cpe:2.3:a:f5:nginx:0.8.35:*:*:*:*:*:*:*

cpe:2.3:a:f5:nginx:0.8.36:*:*:*:*:*:*:*

cpe:2.3:a:f5:nginx:0.8.40:*:*:*:*:*:*:*

cpe:2.3:a:f5:nginx:1.2.6:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00391

Низкий

4.8 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2011-4968

CVSS3: 4.8

ubuntu

около 6 лет назад

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)

CVE-2011-4968

CVSS3: 4.8

debian

около 6 лет назад

nginx http proxy module does not verify peer identity of https origin ...

GHSA-x9wg-g9hq-p992

CVSS3: 4.8

github

почти 4 года назад

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)

EPSS

Процентиль: 60%

0.00391

Низкий

4.8 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-20