What is CVE-2020-12440?

CVE-2020-12440 is a vulnerability that was initially reported to affect NGINX through version 1.18.0. However, after further investigation, it was marked as "REJECT" and is no longer considered a security issue. As a result, there is no severity rating associated with this vulnerability, and it does not pose a threat to systems using NGINX through version 1.18.0. This information is important for those managing systems with NGINX, as it clarifies that no action is needed to address this particular vulnerability.

Who is impacted by this?

Initially, CVE-2020-12440 was reported as a vulnerability affecting NGINX through version 1.18.0. However, after further investigation, it was determined that it was not a security issue and the vulnerability was rejected. As a result, no users or versions are affected by this vulnerability, and there is no need for concern or action regarding this particular issue.

What to do if CVE-2020-12440 affected you

Since CVE-2020-12440 has been rejected and is no longer considered a security issue, there is no need to take any action if you were previously concerned about this vulnerability. Rest assured that your systems using NGINX through version 1.18.0 are not affected by this issue.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

CVE-2020-12440 is not listed in CISA's Known Exploited Vulnerabilities Catalog.

Weakness Enumeration

The weakness enumeration for this vulnerability is "Insufficient Information", indicating a lack of specific details about the vulnerability and its mitigation.

Learn More

For a comprehensive understanding of this vulnerability, refer to the NVD page and the sources listed below.

• MITRE's CVE Record