Опубликовано: 19 нояб. 2019
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 5.8
CVSS3: 4.8
Описание
nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.9.3-1ubuntu1 |
| esm-infra-legacy/trusty | ignored | see notes |
| hardy | ignored | end of life |
| lucid | ignored | end of life |
| oneiric | ignored | end of life |
| precise | ignored | end of life |
| quantal | ignored | end of life |
| raring | ignored | end of life |
| saucy | ignored | end of life |
| trusty | ignored | end of standard support |
Показывать по
10
EPSS
Процентиль: 89%
0.03989
Низкий
5.8 Medium
CVSS2
4.8 Medium
CVSS3
Связанные уязвимости
CVSS3: 4.8
nvd
больше 6 лет назад
nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
CVSS3: 4.8
debian
больше 6 лет назад
nginx http proxy module does not verify peer identity of https origin ...
CVSS3: 4.8
github
больше 4 лет назад
nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
EPSS
Процентиль: 89%
0.03989
Низкий
5.8 Medium
CVSS2
4.8 Medium
CVSS3