NetSight
high7.4

CVE-2021-23018

Intra-cluster communication does not use TLS.

Impact

Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster.

Affected products

VendorProductAffected versions
F5Nginx Controller
from 3.0.0 through 3.4.0

Weakness classification

References