CVEDB API - Fast Vulnerability Dashboard

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-5894

On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 61.1%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 5.8

References

Products affected by CVE-2020-5894

F5 » Nginx Controller » Version: 3.0.0

cpe:2.3:a:f5:nginx_controller:3.0.0
F5 » Nginx Controller » Version: 3.1.0

cpe:2.3:a:f5:nginx_controller:3.1.0
F5 » Nginx Controller » Version: 3.2.0

cpe:2.3:a:f5:nginx_controller:3.2.0
F5 » Nginx Controller » Version: 3.3.0

cpe:2.3:a:f5:nginx_controller:3.3.0

Products

Pricing

Contact Us

support@shodan.io

Shodan ® - All rights reserved