NetSight
high8.1

CVE-2020-5867

In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages

Impact

In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages

Affected products

VendorProductAffected versions
F5Nginx Controller
from 2.0.0 through 2.9.0
from 3.0.0 before 3.3.0
Version 1.0.1
NetappCloud Backup
All versions

Weakness classification

References