K27205552 : NGINX Controller vulnerability CVE-2020-5864

2020-04-2300:00:00

my.f5.com

0.002 Low

EPSS

Percentile

55.2%

JSON

Security Advisory Description

Communication between NGINX Controller and NGINX Plus instances skip TLS verification by default. (CVE-2020-5864)

Impact

This vulnerability enables a man-in-the-middle (MITM) attack that can intercept the communication channel and read/modify data in transit.

CPENameOperatorVersion
nginx controllereq1.0.1
nginx controllereq2.0.0
nginx controllereq2.1.0
nginx controllereq2.2.0
nginx controllereq2.3.0
nginx controllereq2.4.0
nginx controllereq2.5.0
nginx controllereq2.6.0
nginx controllereq2.7.0
nginx controllereq2.8.0

Name	Operator	Version
nginx controller	eq	1.0.1
nginx controller	eq	2.0.0
nginx controller	eq	2.1.0
nginx controller	eq	2.2.0
nginx controller	eq	2.3.0
nginx controller	eq	2.4.0
nginx controller	eq	2.5.0
nginx controller	eq	2.6.0
nginx controller	eq	2.7.0
nginx controller	eq	2.8.0

Rows per page:

1-10 of 161

0.002 Low

EPSS

Percentile

55.2%

JSON

Related for F5:K27205552