CVE-2020-5864

In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default

published April 23, 2020

CVSS
—
EPSS
1%
Percentile
64.2
In the wild
Unconfirmed
What it is

In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01059 · 64.2th percentile
Published
2020-04-23T18:32Z
EPSS history
Timeline
  • 23 APR 18:32Z
    In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default
    cvelistv5