high8.1
CVE-2023-28656
NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment.
Impact
NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netapp | Cloud Backup | All versions |
| Netapp | Ontap Select Deploy | All versions |
| F5 | Nginx Api Connectivity Manager | from 1.0.0 before 1.5.0 |
| F5 | Nginx Instance Manager | from 2.0.0 before 2.9.0 |
| F5 | Nginx Security Monitoring | from 1.0.0 before 1.3.0 |