CVE-2021-23055CWE-732

On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress Controller does not apply to…

published April 21, 2022

CVSS
—
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress Controller does not apply to Ingress objects. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00769 · 55.1th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2022-04-21T18:14Z
EPSS history
Timeline
  • 21 APR 18:14Z
    On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress Controller does not apply to…
    cvelistv5