PT-2020-5282 · Nginx · Nginx Controller Agent

Name of the Vulnerable Software and Affected Versions: NGINX Controller Agent versions 1.0.1, 2.0.0 through 2.9.0, 3.0.0 through 3.9.0 Description: The issue is related to the NGINX Controller Agent's failure to use absolute paths when calling system utilities, which can be exploited by a remote...

Design/Logic Flaw

In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages...

CVE-2020-5867: Cleartext Transmission of Sensitive Information

In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages...

PT-2020-18768

Name of the Vulnerable Software and Affected Versions NGINX Controller Agent versions prior to 3.3.0 Description The issue concerns the NGINX Controller Agent installer script 'install.sh', which uses HTTP instead of HTTPS to check and install packages. This could potentially expose the system to...