CVE-2020-5894

Mô tả

Tham khảo

• support.f5.com/csp/article/K13028514 · Mitigation

Lỗ hổng khác của nginx controller

• CVE-2021-23021TRUNG BÌNH 5.5The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bi…
• CVE-2021-23020TRUNG BÌNH 5.5The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predicta…
• CVE-2021-23019CAO 7.8The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included i…
• CVE-2021-23018CAO 7.4Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protoc…
• CVE-2020-27730NGHIÊM TRỌNG 9.8In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities.