5.3

CVE-2025-23419: debian debian_linux Incorrect Authorization

CVSS: 5.3v4.0MediumAnalyzed
AliasesALPINE-CVE-2025-23419MGASA-2025-0051RHSA-2025:7331
Published 05-02-2025Last modified 23-01-2026
Open JSON

Vulnerability summary

CVE-2025-23419 is a medium (CVSS 5.3) Incorrect Authorization vulnerability in debian debian_linux. EPSS estimates a 2.79% chance of exploitation in the next 30 days, higher than 86.2% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.3/10
010
Medium · v4.0 (CVE.org)
EPSS score
2.79%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
DLA-4091-1CGA-4R5R-C8VR-87J5

Timeline

  1. 05-02-2025
    PublishedVulnerability first disclosed.
  2. 23-01-2026
    Last modifiedVulnerability information updated.

Description

When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS metrics

11 scores · 8 sources · 2 versions

EPSS trend

Probability

2.79%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

0.00 pp

From 2.79% on 19-09-2026

19-09-202619-10-2026
EPSS score
2.79%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat18 products
  • nginx< 2:1.20.1-22.el9
  • nginx-all-modules< 2:1.20.1-22.el9
  • nginx-core< 2:1.20.1-22.el9
  • nginx-core-debuginfo< 2:1.20.1-22.el9
  • nginx-debuginfo< 2:1.20.1-22.el9
Chainguard6 products
  • ingress-nginx-controller-1.13< 1.13.0-r0 | < 1.13.8-r0
  • ingress-nginx-controller-1.14< 1.14.0-r0
  • ingress-nginx-controller-1.15< 1.15.0-r0
  • ingress-nginx-controller-fips-1.13< 1.13.0-r0
  • ingress-nginx-controller-fips-1.14< 1.14.0-r0
F53 products
  • nginx≥ 1.11.4, < 1.26.3 | ≥ 1.27.0, < 1.27.4
  • nginx open source≥ 1.11.4 (No fix recorded)
  • nginx plus≥ R17 (No fix recorded) | ≥ r28, < r32 | r32 | r32:p1 | r33 | r33:p1
Debian2 products
Wolfi2 products
  • ingress-nginx-controller-1.14< 1.14.0-r0
  • ingress-nginx-controller-1.15< 1.15.0-r0
Alpine1 product
  • nginx≥ 1.11.4, < 1.26.3-r0
Mageia1 product
  • nginx< 1.26.3-1.mga9
Opensuse1 product
  • nginx&distro=openSUSE Tumbleweed< 1.27.4-1.1
Ubuntu1 product
  • nginxAll versions (No fix recorded) | < 1.18.0-0ubuntu1.7 | < 1.18.0-6ubuntu14.6 | < 1.24.0-2ubuntu7.3

9 vendors · 35 products

References

22 links
Show all 22 references