CVE-2020-5865
23.04.2020, 19:15
In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over unencrypted channels, making the communicated data vulnerable to interception via man-in-the-middle (MiTM) attacks.Enginsight
| Vendor | Product | Version |
|---|---|---|
| f5 | nginx_controller | 2.0.0 ≤ 𝑥 ≤ 2.9.0 |
| f5 | nginx_controller | 3.0.0 ≤ 𝑥 < 3.3.0 |
| f5 | nginx_controller | 1.0.1 |
| netapp | cloud_backup | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration