Description
On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | NGINX Controller | < 3.4.0 | — |
Unscored
CVE-2020-5894
EUVD-2020-27048GHSA-q676-x7h7-vq4f
On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.
Published May 7, 2020 · Updated Aug 4, 2024 · Assigned by f5