Red Hat Security AdvisoryRHSA-2020:5495
nginx:1.16 security update
Released 2020-12-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) nginx-1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1.aarch64::nginx:1.16, nginx-1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1.ppc64le::nginx:1.16, nginx-1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1.s390x::nginx:1.16 +24
Fixes 1 record
Priority MEDIUM 40
NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a l…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.14961 · Published 2020-01-09 · Partial fix CWE-444
