CVE-2023-28724

Description

NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

https://security.netapp.com/advisory/ntap-20230609-0006/

https://my.f5.com/manage/s/article/K000133233

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3