CVE-2021-23018CWE-319

Intra-cluster communication does not use TLS

published June 1, 2021

CVSS
—
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00544 · 44.9th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2021-06-01T11:51Z
EPSS history
Timeline
  • 01 JUN 11:51Z
    Intra-cluster communication does not use TLS
    cvelistv5