CVE-2020-27730 : In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does

In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities.

Published 2020-12-11 20:15:17

Updated 2022-08-06 03:51:30

Source F5 Networks

View at NVD, CVE.org

Vulnerability category: Directory traversal

Products affected by CVE-2020-27730

F5 » Nginx Controller
Versions from including (>=) 2.0.0 and up to, including, (<=) 2.9.0
cpe:2.3:a:f5:nginx_controller:*:*:*:*:*:*:*:*
Matching versions
F5 » Nginx Controller
Versions from including (>=) 3.0.0 and before (<) 3.10.0
cpe:2.3:a:f5:nginx_controller:*:*:*:*:*:*:*:*
Matching versions
F5 » Nginx Controller » Version: 1.0.1
cpe:2.3:a:f5:nginx_controller:1.0.1:*:*:*:*:*:*:*
Matching versions
Netapp » Cloud Backup » Version: N/A
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

1.46%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 79 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Assigned by: nvd@nist.gov (Primary)

https://support.f5.com/csp/article/K43530108

Vendor Advisory
https://security.netapp.com/advisory/ntap-20210115-0004/

CVE-2020-27730 NGINX Vulnerability in NetApp Products | NetApp Product Security
Third Party Advisory

Jump to