NetSight
medium5.5

CVE-2020-5866

In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses sensitive items as …

Impact

In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses sensitive items as command-line arguments.

Affected products

VendorProductAffected versions
F5Nginx Controller
from 2.0.0 through 2.9.0
from 3.0.0 before 3.3.0
Version 1.0.1

Weakness classification

References