CVE-2023-28656

NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Score

CVSS 3.1 8.1 High

Status

Analyzed - f5sirt@f5.com

Published

2023-05-03

Last modified

2025-02-13

Weaknesses

CWE-639

Affected products

• Nginx Api Connectivity Manager (F5)
• Nginx Instance Manager (F5)
• Nginx Security Monitoring (F5)
• Cloud Backup (Netapp)
• Ontap Select Deploy (Netapp)

References

• https://my.f5.com/manage/s/article/K000133417
• https://security.netapp.com/advisory/ntap-20230609-0006/