CVE-2018-8059

The Djelibeybi configuration examples for use of NGINX in SUSE Portus 2.3, when applied to certain configurations involving Docker Compose, have a Missing SSL Certificate Validation issue because no proxy_ssl_* directives are used.

• CWE-295

• http://openwall.com/lists/oss-security/2018/03/07/4Mailing List, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/140144Third Party Advisory
• http://openwall.com/lists/oss-security/2018/03/07/4Mailing List, Third Party Advisory

Published

Mar 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-8048In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HT…
• CVE-2018-8049The Stealth endpoint in Unisys Stealth SVG 2.8.x, 3.0.x befo…
• CVE-2018-8050The af_get_page() function in lib/afflib_pages.cpp in AFFLIB…
• CVE-2018-8056Physical path Leakage exists in Western Bridge Cobub Razor 0…
• CVE-2018-8057A SQL Injection vulnerability exists in Western Bridge Cobub…
• CVE-2018-8058CMS Made Simple (CMSMS) 2.2.6 has XSS in admin/moduleinterfa…
• CVE-2018-8060HWiNFO AMD64 Kernel driver version 8.98 and lower allows an …
• CVE-2018-8061HWiNFO AMD64 Kernel driver version 8.98 and lower allows an …
• CVE-2018-8062A cross-site scripting (XSS) vulnerability on Comtrend AR-53…5.4
• CVE-2018-8065An issue was discovered in the web server in Flexense SyncBr…
• CVE-2018-8069QCMS version 3.0 has XSS via the webname parameter to the /b…
• CVE-2018-8070QCMS version 3.0 has XSS via the title parameter to the /gue…