K31150658 : NGINX Controller vulnerability CVE-2020-5909

Security Advisory Description

When users run the command displayed in NGINX Controller user interface (UI) to fetch the agent installer, the server TLS certificate is not verified. (CVE-2020-5909)

Impact

A man-in-the-middle (MITM) attacker can intercept the communication channel and read/modify data in transit.