Security Advisory

CVE-2014-3616

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-12-08 11:00:00

Last updated 2024-08-06 10:50:17

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks.

← Browse all CVEs View on cve.org ↗