Skip to content
OpenAdvisories
High · 8.1 CVE-2023-28656 EUVD-2023-32317GHSA-gjg3-3x79-mxh4

NGINX Management Suite vulnerability

Published May 3, 2023 · Updated Feb 13, 2025 · Assigned by f5

Vendor: F5 Product: NGINX API Connectivity Manager Product: NGINX Instance Manager Product: NGINX Security Monitoring Category: Network devices

Description

NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment.  

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 NGINX Instance Manager 2.0.0 – < 2.9.0 2.9.0
F5 NGINX API Connectivity Manager 1.0.0 – < 1.5.0 1.5.0
F5 NGINX Security Monitoring 1.0.0 – < 1.3.0 1.3.0

Advisories 1

References