CVE-2014-3616

score

<0.1

cvss

4.3

epss

5.7%

published

2014-12-08

kev added

—

first seen

2026-10-21

Nginx versions 0.5.6 through 1.7.4 contain a session reuse vulnerability caused by shared ssl_session_cache or ssl_session_ticket_key, letting remote attackers conduct 'virtual host confusion' attacks, exploit requires attacker to have certain privileges.