What is CVE-2020-5863?

CVE-2020-5863 is a high-severity vulnerability in F5 Nginx_controller. CVSS score: 8.6/10. Published 2020-03-27.

How severe is CVE-2020-5863?

High severity. CVSS v3 base score is 8.6 out of 10.

Vulnerability in F5 Nginx_controller

CVE-2020-5863

In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged user accounts. The user which is created is only able to upload a new license to the system but cann…

EPSS: 0.011 (62.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H.

Affected products

F5 Nginx_controller — versions 1.0.1
Netapp Cloud_backup
N/a Nginx Controller — versions 3.0.0-3.1.0, 2.0.0-2.9.0, 1.0.1

References

f5sirt@f5.com (x_refsource_MISC, Vendor Advisory)
f5sirt@f5.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2020-5863?: CVE-2020-5863 is a high-severity vulnerability in F5 Nginx_controller. CVSS score: 8.6/10. Published 2020-03-27.
How severe is CVE-2020-5863?: High severity. CVSS v3 base score is 8.6 out of 10.