K000133233 : NGINX Management Suite vulnerability CVE-2023-28724

Security Advisory Description

NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager. (CVE-2023-28724)

Impact

Incorrect permissions on certain files may cause a local privilege escalation that could lead to information leakage or modification of sensitive files.