Skip to content
OpenAdvisories
Medium WID-SEC-2023-0791 1 CVE

NGINX: Schwachstelle ermöglicht Offenlegung von Informationen

Published Mar 29, 2023 · Updated Apr 10, 2023 · Revision 2 · de-DE

Vendor: nginx Product: nginx Product: NGINX Agent < 2.23.3 Product: NGINX Instance Manager < 2.9.0 Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in NGINX ausnutzen, um Informationen offenzulegen.

Product

NGINX ist eine Webserver-, Reverse Proxy- und E-Mail-Proxy Software.

Vulnerabilities 1

  • Medium 5.5
    CVE-2023-1550

    NGINX Agent vulnerability CVE-2023-1550

    Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 inserts sensitive information into a log file. An authenticated attacker with local access to read agent log files may gain access to private …

    F5 NGINX Agent Network devices

Revision history

  1. #2

    Neue Updates von F5 aufgenommen

  2. #1

    Initiale Fassung

References