Debian/nginx: unknown
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This
Action: Upgrade nginx to 1.22.1-9+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.22.1-9+deb12u1 | - |
Fixed versions
| 1.22.1-9+deb12u1 |
Sources
published · modified · JSON