NGINX Controller

CVEs (3)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-27730	NGINX Controller NGINX Controller	Cri	0.64	9.8	0.02	Dec 11, 2020	In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities.
CVE-2021-23018	NGINX Controller NGINX Controller	Hig	0.48	7.4	0.01	Jun 1, 2021	Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster.
CVE-2021-23021	NGINX Controller NGINX Controller	Med	0.36	5.5	0.00	Jun 1, 2021	The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bits set to 644.

CVE-2020-27730CriDec 11, 2020
NGINX Controller
NGINX Controller
risk 0.64cvss 9.8epss 0.02
In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities.
CVE-2021-23018HigJun 1, 2021
NGINX Controller
NGINX Controller
risk 0.48cvss 7.4epss 0.01
Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster.
CVE-2021-23021MedJun 1, 2021
NGINX Controller
NGINX Controller
risk 0.36cvss 5.5epss 0.00
The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bits set to 644.