vulnerability

Debian: CVE-2011-4968: nginx -- security update

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:P/A:N)

Published

Nov 19, 2019

Added

Jul 30, 2024

Modified

Mar 30, 2026

Description

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)

debian-upgrade-nginx

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.