medium4.9
CVE-2024-7634
NGINX Agent's "config_dirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secu…
Impact
NGINX Agent's "config_dirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Nginx Agent | from 2.17.0 before 2.37.0 |
| F5 | Nginx Instance Manager | from 2.3.1 before 2.17.2 |