Количество 11
Количество 11
BDU:2025-03281
Уязвимость реализации протокола TLS 1.3 веб-серверов NGINX Plus и NGINX Open Source, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260224-73-0002
Уязвимость angie
ROS-20250307-10
Уязвимость nginx
CVE-2025-23419
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-23419
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-23419
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-23419
TLS Session Resumption Vulnerability
CVE-2025-23419
When multiple server blocks are configured to share the same IP addres ...
GHSA-84xh-pwc6-7g4g
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
ELSA-2025-7331
ELSA-2025-7331: nginx security update (MODERATE)
SUSE-SU-2025:03444-1
Security update for nginx
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-03281 Уязвимость реализации протокола TLS 1.3 веб-серверов NGINX Plus и NGINX Open Source, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 4.3 | 3% Низкий | больше 1 года назад |
 | ROS-20260224-73-0002 Уязвимость angie | CVSS3: 4.3 | 3% Низкий | 5 месяцев назад |
| ROS-20250307-10 Уязвимость nginx | CVSS3: 4.3 | 3% Низкий | больше 1 года назад |
 | CVE-2025-23419 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 4.3 | 3% Низкий | больше 1 года назад |
 | CVE-2025-23419 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 4.3 | 3% Низкий | больше 1 года назад |
 | CVE-2025-23419 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 4.3 | 3% Низкий | больше 1 года назад |
 | CVE-2025-23419 TLS Session Resumption Vulnerability | CVSS3: 4.3 | 3% Низкий | 5 месяцев назад |
| CVE-2025-23419 When multiple server blocks are configured to share the same IP addres ... | CVSS3: 4.3 | 3% Низкий | больше 1 года назад |
| GHSA-84xh-pwc6-7g4g When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 4.3 | 3% Низкий | больше 1 года назад |
| ELSA-2025-7331 ELSA-2025-7331: nginx security update (MODERATE) | 3% Низкий | около 1 года назад | |
 | SUSE-SU-2025:03444-1 Security update for nginx | 10 месяцев назад |
Уязвимостей на страницу