cbcvebase.
CVE-2021-23021
published 2021-06-01

CVE-2021-23021: The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bits set to 644.

medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bits set to 644.

Affected

3 ranges
VendorProductVersion rangeFixed in
f5nginx_controller
f5nginx_controller
f5nginx_controller>= 3.0.0 < 3.7.03.7.0