Threats tagged 'bit-nginx-2025-23419'

A vulnerability in nginx allows bypassing client certificate authentication when multiple server blocks share the same IP address and port using TLS session resumption. This occurs if TLS Session Tickets or SSL session cache are used in the default server performing client certificate authentication. The issue has a moderate security impact and affects multiple nginx versions. A patch is available from Red Hat and users are advised to update to fixed versions.