imPC@ndo IT

Tracker / CVE-2021-23019

CVE-2021-23019

High 7.8

The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package.

Affected products and versions

f5 nginx_controller · 2.0.0 → 2.9.0
f5 nginx_controller · 3.0.0 → 3.15.0

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References