CVE-2011-4968: Input Validation
nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2011-4968?
CVE-2011-4968 refers to a vulnerability in the nginx http proxy module that allows a man-in-the-middle attack due to lack of peer identity verification.
What is the severity of CVE-2011-4968?
CVE-2011-4968 has a severity level of medium.
Which software is affected by CVE-2011-4968?
The nginx package versions 1.14.2-2+deb10u4, 1.14.2-2+deb10u5, 1.18.0-6.1+deb11u3, and 1.22.1-9 on Debian, as well as various versions of F5 Nginx, are affected by CVE-2011-4968.
How can I fix CVE-2011-4968?
To fix CVE-2011-4968, update the affected nginx package to version 1.14.2-2+deb10u4, 1.14.2-2+deb10u5, 1.18.0-6.1+deb11u3, or 1.22.1-9, depending on your Debian version.
Is there any additional information about CVE-2011-4968?
You can find additional information about CVE-2011-4968 in the references provided: [link1](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4968), [link2](https://access.redhat.com/security/cve/cve-2011-4968), [link3](https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-4968).