CVE-2026-97629
Qualys 위협 인텔 · 심각도 3/5 · QID 6665710 · Bellsoft Alpaquita Linux
Description
When NGINX Plus or NGINX Open Source is configured with ssl_session_cache
shared:name:size
without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions
in a non-deterministic manner that is beyond the attacker's control. An attacker could leverage this vulnerability to bypass verification of client certificates.
Impact
This vulnerability can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with access to sensitive information. There is no control plane exposure; this is a data plane issue only.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
When NGINX Plus or NGINX Open Source is configured with ssl_session_cache
shared:name:size
without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions
in a non-deterministic manner that is beyond the attacker's control. An attacker could leverage this vulnerability to bypass verification of client certificates.
Impact
This vulnerability can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with access to sensitive information. There is no control plane exposure; this is a data plane issue only.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
타임라인
- NVD 공개
- 첫 보도 The Hacker News · NGINX, 원격 코드 실행(RCE) 가능 취약점 및 클라이언트 인증서…
- 최근 보도 (총 3건) KISA 보호나라 · F5 제품 보안 업데이트 권고
- KISA 보안공지 F5 제품 보안 업데이트 권고
KISA 보호나라 보안공지
F5 제품 보안 업데이트 권고
F5社는 자사 제품에서 발생하는 취약점을 해결한 보안 업데이트 발표 [1]~[5] o 영향을 받는 버전을 사용 중인 사용자는 해결 방안에 따라 최신 버전으로 업데이트 권고
벡터: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N