f5 nginx agent vulnerabilities and exploits

(subscribe to this query)

NA

Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 prior to 2.23.3 inserts sensitive information into a log file. An authenticated attacker with local access to read agent log files may gain access to private keys. This issue is...

F5 Nginx Agent F5 Nginx Instance Manager

2.1

CVSSv2

The Nginx Controller 3.x prior to 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bits set to 644.

F5 Nginx Controller

7.5

CVSSv2

In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities.

F5 Nginx Controller F5 Nginx Controller 1.0.1 Netapp Cloud Backup -

5.8

CVSSv2

In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the agent installer, the server TLS certificate is not verified.

F5 Nginx Controller 1.0.1 F5 Nginx Controller

6.8

CVSSv2

In versions before 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages

F5 Nginx Controller F5 Nginx Controller 1.0.1 Netapp Cloud Backup -

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook