Lucene search
K

5 matches found

OpenVAS
OpenVAS
added 2020/11/05 12:0 a.m.20 views

nginx Information Disclosure Vulnerability (CVE-2011-4968)

nginx is prone to an information disclosure vulnerability in the http proxy module. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

5.8CVSS6.6AI score0.03989EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2019/11/19 4:15 p.m.28 views

CVE-2011-4968

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack MITM...

5.8CVSS5.9AI score0.03989EPSS
Exploits1References2
Cvelist
Cvelist
added 2019/11/19 3:18 p.m.33 views

CVE-2011-4968

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack MITM...

5AI score0.03989EPSS
Exploits1References7
CVE
CVE
added 2019/11/19 3:18 p.m.137 views

CVE-2011-4968

CVE-2011-4968 concerns the nginx http proxy module failing to verify the peer identity of the HTTPS origin server, enabling potential MITM attacks. The vulnerability is described as an information-security issue in the nginx proxy component where TLS peer verification is not performed for upstrea...

5.8CVSS5AI score0.03989EPSS
Exploits1References7Affected Software1
seebug.org
seebug.org
added 2013/01/05 12:0 a.m.70 views

nginx 中间人攻击漏洞(CVE-2011-4968)

Bugtraq ID:57139 CVE ID:CVE-2011-4968 nginx是一款高性能的web服务器,使用非常广泛,其不仅经常被用作反向代理,也可以非常好的支持PHP的运行 nginx包含的Http代理模块允许通过https与源服务器通信,但是没有正确校验源服务器身份,允许攻击者在代理和源服务器之间进行中间人攻击 0 Igor Sysoev nginx 0.8.40 Igor Sysoev nginx 0.8.36 Igor Sysoev nginx 0.8.35 Igor Sysoev nginx 0.8.33 Igor Sysoev nginx 0.7.66 Igor...

5.7AI score0.03989EPSS
Exploits1
Rows per page
Query Builder