K37080719 : NGINX Instance Manager vulnerability CVE-2022-35241

Security Advisory Description

When NGINX Instance Manager is in use, undisclosed requests can cause an increase in disk resource utilization. (CVE-2022-35241)

Impact

System performance can degrade until system inodes become free. This vulnerability allows a remote, authenticated attacker to cause a degradation of service that can lead to a denial-of-service (DoS) on the NGINX Instance Manager system. There is no data plane exposure; this is a control plane issue only.