Missing SSL Certificate Validation in NGINX Configuration Examples for SUSE Portus 2.3 with Docker Compose

Missing SSL Certificate Validation in NGINX Configuration Examples for SUSE Portus 2.3 with Docker Compose

CVE-2018-8059 · MEDIUM Severity

AV:A/AC:L/AU:N/C:P/I:P/A:P

The Djelibeybi configuration examples for use of NGINX in SUSE Portus 2.3, when applied to certain configurations involving Docker Compose, have a Missing SSL Certificate Validation issue because no proxy_ssl_* directives are used.

Learn more about our Cis Benchmark Audit For Docker.