Most recent entries from all

cnvd-2020-35493

fkie_cve-2020-5894

On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.

GHSA-q676-x7h7-vq4f

On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.

gsd-2020-5894

VAR-202005-0989

On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out. NGINX Controller There is a session fixation vulnerability in.Information may be obtained and tampered with. F5 NGINX Controller is a centralized monitoring and management platform for NGINX from F5 Corporation in the United States. The platform supports managing multiple NGINX instances using a visual interface. A remote attacker could exploit this vulnerability to gain unauthorized access to other user sessions