F5 NGINX Controller 1.0.1
Approved changes feed: RSS · Atom
cpe:2.3:a:f5:nginx_controller:1.0.1:*:*:*:*:*:*:*
part: a version: 1.0.1 update: *
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Nginx Controller (a4576081-7556-52ae-8f21-07c7c95fb3bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-5911 |
vulnerable | 2026-06-08 05:26:44.160734 |
Details available
In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller installer starts the download of Kubernetes packages from an HTTP URL On Debian/Ubuntu system.
Published: 2020-07-02T12:23:40.000Z
Updated: 2024-08-04T08:47:40.918Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5910 |
vulnerable | 2026-06-08 05:26:44.160440 |
Details available
In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the Neural Autonomic Transport System (NATS) messaging services in use by the NGINX Controller do not require any form of authentication, so any successful connection would be authorized.
Published: 2020-07-02T12:25:11.000Z
Updated: 2024-08-04T08:47:40.655Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5909 |
vulnerable | 2026-06-08 05:26:44.160091 |
Details available
In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the agent installer, the server TLS certificate is not verified.
Published: 2020-07-02T12:26:39.000Z
Updated: 2024-08-04T08:47:40.733Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5900 |
vulnerable | 2026-06-08 05:26:44.139680 |
Details available
In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery (CSRF) protections for the NGINX Controller user interface.
Published: 2020-07-01T13:59:42.000Z
Updated: 2024-08-04T08:47:40.617Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5867 |
vulnerable | 2026-06-08 05:26:44.076488 |
Details available
In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages
Published: 2020-04-23T19:58:59.000Z
Updated: 2024-08-04T08:47:40.090Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5866 |
vulnerable | 2026-06-08 05:26:44.076133 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5865 |
vulnerable | 2026-06-08 05:26:44.075586 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5864 |
vulnerable | 2026-06-08 05:26:44.075016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5863 |
vulnerable | 2026-06-08 05:26:44.073567 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27730 |
vulnerable | 2026-06-08 05:23:53.004888 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.