CVE-2020-5867

In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages
Configurations

Configuration 1

cpe:2.3:a:f5:nginx_controller:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:nginx_controller:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:f5:nginx_controller:*:*:*:*:*:*:*:*
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

Information

Published : 2020-04-23 08:15

Updated : 2022-04-26 05:22


NVD link : CVE-2020-5867

Mitre link : CVE-2020-5867

Products Affected
No products.
CWE
CWE-319

Cleartext Transmission of Sensitive Information

CWE-494

Download of Code Without Integrity Check