vulnerability

Alma Linux: CVE-2019-20372: Moderate: nginx:1.16 security update (ALSA-2020-5495)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Jan 9, 2020
Added
May 4, 2022
Modified
May 4, 2022

Description

NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

Solution(s)

alma-upgrade-nginxalma-upgrade-nginx-all-modulesalma-upgrade-nginx-filesystemalma-upgrade-nginx-mod-http-image-filteralma-upgrade-nginx-mod-http-perlalma-upgrade-nginx-mod-http-xslt-filteralma-upgrade-nginx-mod-mailalma-upgrade-nginx-mod-stream
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.