CVE-2020-5865

2020-04-2318:16:00

www.cve.org

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

28.7%

JSON

In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over unencrypted channels, making the communicated data vulnerable to interception via man-in-the-middle (MiTM) attacks.

CNA Affected

[
  {
    "product": "NGINX Controller",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "< 3.3.0"
      }
    ]
  }
]