CVE-2020-5909

In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the agent installer, the…

published July 2, 2020

CVSS
—
EPSS
0%
Percentile
33.1
In the wild
Unconfirmed
What it is

In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the agent installer, the server TLS certificate is not verified.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00400 · 33.1th percentile
Published
2020-07-02T12:26Z
EPSS history
Timeline
  • 02 JUL 12:26Z
    In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the agent installer, the…
    cvelistv5