CVE-2020-5865

In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over unencrypted channels, making the communicated data vulnerable to interception via man-in-the-middle (MiTM) attacks.

Score

CVSS 3.1 4.8 Medium

Status

Modified - f5sirt@f5.com

Published

2020-04-23

Last modified

2024-08-04

Weaknesses

CWE-319

Affected products

• Nginx Controller (F5)
• Cloud Backup (Netapp)

References

• https://security.netapp.com/advisory/ntap-20200430-0005/
• https://support.f5.com/csp/article/K21009022