Vulnerability Details CVE-2020-5911
In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller installer starts the download of Kubernetes packages from an HTTP URL On Debian/Ubuntu system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.1%
CVSS Severity
CVSS v3 Score 7.3
CVSS v2 Score 7.5
References
Products affected by CVE-2020-5911
-
cpe:2.3:a:f5:nginx_controller:1.0.1
-
cpe:2.3:a:f5:nginx_controller:2.0.0
-
cpe:2.3:a:f5:nginx_controller:2.1.0
-
cpe:2.3:a:f5:nginx_controller:2.2.0
-
cpe:2.3:a:f5:nginx_controller:2.3.0
-
cpe:2.3:a:f5:nginx_controller:2.4.0
-
cpe:2.3:a:f5:nginx_controller:2.5.0
-
cpe:2.3:a:f5:nginx_controller:2.6.0
-
cpe:2.3:a:f5:nginx_controller:2.7.0
-
cpe:2.3:a:f5:nginx_controller:2.8.0
-
cpe:2.3:a:f5:nginx_controller:2.8.1
-
cpe:2.3:a:f5:nginx_controller:2.9.0
-
cpe:2.3:a:f5:nginx_controller:3.0.0
-
cpe:2.3:a:f5:nginx_controller:3.1.0
-
cpe:2.3:a:f5:nginx_controller:3.2.0
-
cpe:2.3:a:f5:nginx_controller:3.3.0
-
cpe:2.3:a:f5:nginx_controller:3.4.0
-
cpe:2.3:a:f5:nginx_controller:3.5.0