Поиск уязвимостей
Количество 14
Количество 14
BDU:2025-03281
Уязвимость реализации протокола TLS 1.3 веб-серверов NGINX Plus и NGINX Open Source, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260224-80-0002
Уязвимость angie
ROS-20260224-73-0002
Уязвимость angie
ROS-20250307-10
Уязвимость nginx
ALT-PU-2025-3205
ALT-PU-2025-3205: package `nginx` update to version 1.26.3-alt1
ALT-PU-2025-3074
ALT-PU-2025-3074: package `nginx` update to version 1.26.3-alt1
CVE-2025-23419
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-23419
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-23419
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-23419
TLS Session Resumption Vulnerability
CVE-2025-23419
When multiple server blocks are configured to share the same IP addres ...
GHSA-84xh-pwc6-7g4g
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
ELSA-2025-7331
ELSA-2025-7331: nginx security update (MODERATE)
SUSE-SU-2025:03444-1
Security update for nginx
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-03281 Уязвимость реализации протокола TLS 1.3 веб-серверов NGINX Plus и NGINX Open Source, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 4.3 | 3% Низкий | почти 2 года назад |
 | ROS-20260224-80-0002 Уязвимость angie | CVSS3: 4.3 | 3% Низкий | 9 месяцев назад |
| ROS-20260224-73-0002 Уязвимость angie | CVSS3: 4.3 | 3% Низкий | 9 месяцев назад |
| ROS-20250307-10 Уязвимость nginx | CVSS3: 4.3 | 3% Низкий | больше 1 года назад |
| ALT-PU-2025-3205 ALT-PU-2025-3205: package `nginx` update to version 1.26.3-alt1 | CVSS3: 4.3 | 3% Низкий | больше 1 года назад |
| ALT-PU-2025-3074 ALT-PU-2025-3074: package `nginx` update to version 1.26.3-alt1 | CVSS3: 4.3 | 3% Низкий | больше 1 года назад |
 | CVE-2025-23419 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 4.3 | 3% Низкий | почти 2 года назад |
 | CVE-2025-23419 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 4.3 | 3% Низкий | почти 2 года назад |
 | CVE-2025-23419 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 4.3 | 3% Низкий | почти 2 года назад |
 | CVE-2025-23419 TLS Session Resumption Vulnerability | CVSS3: 4.3 | 3% Низкий | 9 месяцев назад |
| CVE-2025-23419 When multiple server blocks are configured to share the same IP addres ... | CVSS3: 4.3 | 3% Низкий | почти 2 года назад |
| GHSA-84xh-pwc6-7g4g When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 4.3 | 3% Низкий | почти 2 года назад |
| ELSA-2025-7331 ELSA-2025-7331: nginx security update (MODERATE) | 3% Низкий | больше 1 года назад | |
 | SUSE-SU-2025:03444-1 Security update for nginx | около 1 года назад |
Уязвимостей на страницу