CVE-2020-5863

In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged user accounts

published March 27, 2020

CVSS
—
EPSS
1%
Percentile
66.6
In the wild
Unconfirmed
What it is

In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged user accounts. The user which is created is only able to upload a new license to the system but cannot view or modify any other components of the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01151 · 66.6th percentile
Published
2020-03-27T14:35Z
EPSS history
Timeline
  • 27 MAR 14:35Z
    In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged user accounts
    cvelistv5