Description (CNA)
In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / NGINX Controller | affected < 3.2.0 |
CWE
No CWE identifiers supplied.
References
- https://support.f5.com/csp/article/K27205552
- https://security.netapp.com/advisory/ntap-20200430-0005/
ADP enrichment
No English description supplied.