F5 Nginx Controller vulnerabilities

• f5 nginx controller api management On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access... CVE-2022-23008 5.4 MediumJanuary 25, 2022
• f5 nginx controller The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf... CVE-2021-23021 5.5 MediumJune 1, 2021
• f5 nginx controller The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and... CVE-2021-23020 5.5 MediumJune 1, 2021
• f5 nginx controller The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed... CVE-2021-23019 7.8 HighJune 1, 2021
• f5 nginx controller Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before... CVE-2021-23018 7.4 HighJune 1, 2021
• f5 nginx controller, netapp cloud backup +1 more In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute... CVE-2020-27730 9.8 CriticalDecember 11, 2020
• f5 nginx controller In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX... CVE-2020-5909 5.4 MediumJuly 2, 2020
• f5 nginx controller In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the Neural Autonomic Transport System (NATS)... CVE-2020-5910 7.5 HighJuly 2, 2020
• f5 nginx controller In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller installer starts the... CVE-2020-5911 7.3 HighJuly 2, 2020
• f5 nginx controller In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site... CVE-2020-5901 9.6 CriticalJuly 1, 2020
• f5 nginx controller In NGINX Controller 3.0.0-3.4.0, recovery code required to change a user's password is... CVE-2020-5899 7.8 HighJuly 1, 2020
• f5 nginx controller In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery... CVE-2020-5900 8.8 HighJuly 1, 2020
• f5 nginx controller On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions... CVE-2020-5895 7.8 HighMay 7, 2020
• f5 nginx controller On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side... CVE-2020-5894 8.1 HighMay 7, 2020
• f5 nginx controller, netapp cloud backup +1 more In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP... CVE-2020-5867 8.1 HighApril 23, 2020
• f5 nginx controller In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in... CVE-2020-5866 5.5 MediumApril 23, 2020
• f5 nginx controller In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX... CVE-2020-5864 7.4 HighApril 23, 2020
• f5 nginx controller, netapp cloud backup +1 more In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres... CVE-2020-5865 4.8 MediumApril 23, 2020
• f5 nginx controller, netapp cloud backup +1 more In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to... CVE-2020-5863 8.6 HighMarch 27, 2020