CVE-2020-5863: f5 nginx_controller
Vulnerability summary
CVE-2020-5863 is a high (CVSS 8.6) vulnerability in f5 nginx_controller. EPSS estimates a 1.15% chance of exploitation in the next 30 days, higher than 66.3% of scored vulnerabilities.
Timeline
- 27-03-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged user accounts. The user which is created is only able to upload a new license to the system but cannot view or modify any other components of the system.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.15%
Chance of exploitation in the next 30 days
Percentile
66%
Versus all other CVEs
30-day change
0.00 pp
From 1.15% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
F51 product
- nginx_controller≥ 2.0.0, ≤ 2.9.0 | ≥ 3.0.0, < 3.2.0 | 1.0.1
Netapp1 product
2 vendors · 2 products