1. Home
  2. CVE Database
  3. CVE-2021-23019
HIGH · 7.8

CVE-2021-23019

The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package.

Vulnerability Description

The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
F5Nginx Controller>= 2.0.0, <= 2.9.0

Related Weaknesses (CWE)

CWE-201CWE-522

References

FAQ

What is CVE-2021-23019?

CVE-2021-23019 is a vulnerability with a CVSS score of 7.8 (HIGH). The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package.

How severe is CVE-2021-23019?

CVE-2021-23019 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-23019?

Check the references section above for vendor advisories and patch information. Affected products include: F5 Nginx Controller.