Skip to content
OpenAdvisories
Unscored CVE-2021-23020 EUVD-2021-10138GHSA-xg8h-3f53-j5px

The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predict…

Published Jun 1, 2021 · Updated Aug 3, 2024 · Assigned by f5

Description

The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys.

Affected products

VendorProductAffectedFixed
— Nginx Controller “3.x before 3.10.0” —

References