Description

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)

Remediation

References

CVE-2011-4968

Related Vulnerabilities

Joomla Other Vulnerability (CVE-2006-1027)

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-16893)

Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9518)

WordPress Plugin Bookmarkify Multiple Vulnerabilities (2.9.2)

OpenSSL Other Vulnerability (CVE-2016-0705)

Severity

Medium

Classification

CVE-2011-4968 CWE-20 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities