CVE-2021-23021CWE-732

The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bits set to 644

published June 1, 2021

CVSS
—
EPSS
0%
Percentile
12.9
In the wild
Unconfirmed
What it is

The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bits set to 644.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00229 · 12.9th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2021-06-01T12:23Z
EPSS history
Timeline
  • 01 JUN 12:23Z
    The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bits set to 644
    cvelistv5