Alpine/nginx: unknown
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This
Action: Upgrade nginx to 1.26.3-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.11.4 | 1.26.3-r0 | - |
Fixed versions
| 1.26.3-r0 |
Sources
published · modified · JSON