high8.1
CVE-2020-5894
On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.
Impact
On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Nginx Controller | from 3.0.0 through 3.3.0 |