CVE-2021-23019
published 2021-06-01CVE-2021-23019: The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support…
PriorityP336high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.24%
14.9th percentile
The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | nginx_controller | — | — |
| f5 | nginx_controller | — | — |
| f5 | nginx_controller | 2.0.0 – 2.9.0 | — |
| f5 | nginx_controller | >= 3.0.0 < 3.15.0 | 3.15.0 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-r42j-8h58-j557: The NGINX Controller 2
ghsa_unreviewed·2022-05-24
CVE-2021-23019 [HIGH] CWE-522 GHSA-r42j-8h58-j557: The NGINX Controller 2
The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package.
F5
CVE-2021-23019: The NGINX Controller 2
vendor_f5·2021-06-01·CVSS 7.8
CVE-2021-23019 [HIGH] CWE-201 CVE-2021-23019: The NGINX Controller 2
CVE-2021-23019: The NGINX Controller 2
The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package.
Affected Products: NGINX Controller
Affected Versions: 2.0.0 - 2.9.0; 3.0.0 - 3.15.0
F5 Advisory Articles: K04884013
F5 References: https://support.f5.com/csp/article/K04884013
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-06-01
Published