Access Restriction Bypass

2022-04-1619:23:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

46.9%

JSON

nginx is vulnerable to access restriction bypass. The vulnerability exists because TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates which allows an attacker to gain access to the system and perform unauthorized actions.

CPENameOperatorVersion
nginx:bioniceq1.14.0-0ubuntu1.7
nginx:bioniceq1.14.0-0ubuntu1.9
nginx:bioniceq1.14.0-0ubuntu1
nginx:focaleq1.17.10-0ubuntu1
nginx:focaleq1.18.0-0ubuntu1
nginx:edgeeq1.18.0-r0
nginx:edgeeq1.18.0-r14
nginx:edgeeq1.20.0-r0
nginx:edgeeq1.16.1-r8
nginx:edgeeq1.18.0-r15

Name	Operator	Version
nginx:bionic	eq	1.14.0-0ubuntu1.7
nginx:bionic	eq	1.14.0-0ubuntu1.9
nginx:bionic	eq	1.14.0-0ubuntu1
nginx:focal	eq	1.17.10-0ubuntu1
nginx:focal	eq	1.18.0-0ubuntu1
nginx:edge	eq	1.18.0-r0
nginx:edge	eq	1.18.0-r14
nginx:edge	eq	1.20.0-r0
nginx:edge	eq	1.16.1-r8
nginx:edge	eq	1.18.0-r15