NC
Product
Nginx Controller
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 11Medium 5Low 0
Watch
Add Nginx Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-23021 | 5.5 | Jun 1 | The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bits set to 644 Affected: 3.0.0 before 3.7.0 |
| CVE-2021-23020 | 5.5 | Jun 1 | The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys Affected: 3.0.0 before 3.10.0 |
| CVE-2020-5866 | 5.5 | Apr 23 | In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses sensitive items as command-line… Affected: 2.0.0 through 2.9.0; 3.0.0 before 3.3.0; 1.0.1 |
| CVE-2020-5909 | 5.4 | Jul 2 | In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the agent installer, the server TLS… Affected: 2.0.0 through 2.9.0; 3.0.0 through 3.5.0; 1.0.1 |
| CVE-2020-5865 | 4.8 | Apr 23 | In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over unencrypted channels, making the communicated data vulnerable… Affected: 2.0.0 through 2.9.0; 3.0.0 before 3.3.0; 1.0.1 |
Showing 5