CVE-2023-28724 NGINX Management Suite vulnerability

2023-05-0314:34:28

CWE-276

raw.githubusercontent.com

nginx

management suite

vulnerability

file permissions

authenticated attacker

sensitive files

instance manager

api connectivity manager

software versions

end of technical support

eots

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.3%

JSON

NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.