NGINX Controller

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2020-27730	NGINX Controller NGINX Controller	Cri	0.64	9.8	0.02		Dec 11, 2020	In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities.
CVE-2021-23018	NGINX Controller NGINX Controller	Hig	0.48	7.4	0.01		Jun 1, 2021	Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster.

CVE-2020-27730CriDec 11, 2020
NGINX Controller
NGINX Controller
risk 0.64cvss 9.8epss 0.02
In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities.
CVE-2021-23018HigJun 1, 2021
NGINX Controller
NGINX Controller
risk 0.48cvss 7.4epss 0.01
Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster.