CVE-2022-35241CWE-400

NGINX Instance Manager vulnerability CVE-2022-35241

Medium · published August 4, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
54.7
In the wild
Unconfirmed
What it is

In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can cause an increase in disk resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00758 · 54.7th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-08-04T17:49Z
EPSS history
Timeline
  • 04 AUG 17:49Z
    NGINX Instance Manager vulnerability CVE-2022-35241
    cvelistv5