Lucene search
F5F5:K00958787HistoryApr 23, 2020 - 12:00 a.m.
K00958787 : NGINX Controller vulnerability CVE-2020-5867
2020-04-2300:00:00
my.f5.com
14
Security Advisory Description
The NGINX Controller Agent installer script ‘install.sh’ uses HTTP instead of HTTPS to check and install packages. (CVE-2020-5867)
Impact
A man-in-the-middle (MITM) attacker can use this vulnerability to intercept the insecure HTTP channel and convincingly forge any packages and get the malicious packages installed on the NGINX Plus instance.
Related
nvd
nvd
CVE-2020-5867
2020-04-23 20:15:13
cvelist
cvelist
CVE-2020-5867
2020-04-23 19:58:59
cve
cve
CVE-2020-5867
2020-04-23 20:15:13
prion
prion
Design/Logic Flaw
2020-04-23 20:15:00