CVE-2018-8059

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The Djelibeybi configuration examples for use of NGINX in SUSE Portus 2.3, when applied to certain configurations involving Docker Compose, have a Missing SSL Certificate Validation issue because no proxy_ssl_* directives are used.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-295

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://openwall.com/lists/oss-security/2018/03/07/4Mailing List, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/140144Third Party Advisory
http://openwall.com/lists/oss-security/2018/03/07/4Mailing List, Third Party Advisory

Timeline

Published: Mar 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-80605.5HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver. If input and/or output CVE-2018-80617.1HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send IOCTL 0x85FE2608 to the device driver with the HWiNFO3 CVE-2018-80625.4A cross-site scripting (XSS) vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04_R02.A2pD035g.d23i firmware allows remote attac CVE-2018-80657.5An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the sync CVE-2018-80695.4QCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI.CVE-2018-80705.4QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI.CVE-2018-80716.1Mautic before v2.13.0 has stored XSS via a theme config file.CVE-2018-80728.8An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The ipcam_cgi binary con CVE-2018-80739.8Yii 2.x before 2.0.15 allows remote attackers to execute arbitrary LUA code via a variant of the CVE-2018-7269 attack in conjunction with th CVE-2018-80748.1Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunctio CVE-2018-80767.5ZenMate 1.5.4 for macOS suffers from a type confusion vulnerability within the com.zenmate.chron-xpc LaunchDaemon component. The LaunchDaemo CVE-2018-80785.4YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html.