Description

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)

Remediation

References

CVE-2011-4968

Related Vulnerabilities

WordPress Plugin WordPress Framework Possible Backdoor (1.0)

WordPress Plugin WPS Hide Login Cross-Site Request Forgery (1.0)

WordPress Plugin WP Mailster Cross-Site Scripting (1.6.1)

Drupal Core 7.x Cross-Site Request Forgery (7.0 - 7.12)

Oracle HTTP Server Other Vulnerability (CVE-2006-5348)

Severity

Medium

Classification

CVE-2011-4968 CWE-20 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities