6.5
Moyenne
CVE-2022-30535 In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can…
Description
In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can obtain the secrets available to the NGINX Ingress Controller. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| NGINX Ingress Controller 2 | 2.x → < 2.3.0 | 2.3.0 |
| NGINX Ingress Controller 1.0 | 1.0.0 → dernières | Pas de correctif indiqué |
Références
- support.f5.com support.f5.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de NGINX Ingress Controller
Les 8 CVE de NGINX Ingress Controller →
CVE-2026-104939
Description
NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress
7.5
Élevée
CVE-2026-94197
An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when…
7.5
Élevée
CVE-2026-77180
When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the…
8.3
Élevée
CVE-2026-52865
When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with…
6.5
Moyenne