Vulnerability Details CVE-2020-5865
In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over unencrypted channels, making the communicated data vulnerable to interception via man-in-the-middle (MiTM) attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.7%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 5.8
References
Products affected by CVE-2020-5865
-
cpe:2.3:a:f5:nginx_controller:1.0.1
-
cpe:2.3:a:f5:nginx_controller:2.0.0
-
cpe:2.3:a:f5:nginx_controller:2.1.0
-
cpe:2.3:a:f5:nginx_controller:2.2.0
-
cpe:2.3:a:f5:nginx_controller:2.3.0
-
cpe:2.3:a:f5:nginx_controller:2.4.0
-
cpe:2.3:a:f5:nginx_controller:2.5.0
-
cpe:2.3:a:f5:nginx_controller:2.6.0
-
cpe:2.3:a:f5:nginx_controller:2.7.0
-
cpe:2.3:a:f5:nginx_controller:2.8.0
-
cpe:2.3:a:f5:nginx_controller:2.8.1
-
cpe:2.3:a:f5:nginx_controller:2.9.0
-
cpe:2.3:a:f5:nginx_controller:3.0.0
-
cpe:2.3:a:f5:nginx_controller:3.1.0
-
cpe:2.3:a:f5:nginx_controller:3.2.0
-
cpe:2.3:a:netapp:cloud_backup:-