TLS Verification Bypass in NGINX Controller by F5 Networks

CVE-2020-5864

What is CVE-2020-5864?

In NGINX Controller versions prior to 3.2.0, a configuration flaw allows communication between the NGINX Controller and NGINX Plus instances to bypass TLS verification by default. This oversight could potentially expose sensitive data during the transmission process, leaving it vulnerable to interception by malicious actors. Users and organizations should update their NGINX Controller to the latest version to ensure secure configuration and safeguard communications against unauthorized access.

References