medium5.5
CVE-2021-23020
The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys.
Impact
The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Nginx Controller | from 3.0.0 before 3.10.0 |