CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2021-23018

Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 49.1%

CVSS Severity

CVSS v3 Score 7.4

CVSS v2 Score 5.8

References

https://support.f5.com/csp/article/K97002210
https://support.f5.com/csp/article/K97002210

Products affected by CVE-2021-23018

F5 » Nginx Controller » Version: 3.0.0

cpe:2.3:a:f5:nginx_controller:3.0.0
F5 » Nginx Controller » Version: 3.1.0

cpe:2.3:a:f5:nginx_controller:3.1.0
F5 » Nginx Controller » Version: 3.2.0

cpe:2.3:a:f5:nginx_controller:3.2.0
F5 » Nginx Controller » Version: 3.3.0

cpe:2.3:a:f5:nginx_controller:3.3.0
F5 » Nginx Controller » Version: 3.4.0

cpe:2.3:a:f5:nginx_controller:3.4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-23018

Products

Pricing

Contact Us