VULNERABILITY INTELLIGENCE

CVE-2020-5910

CVSS score7.5 HIGH
EPSS probability1.15%
CISA KEVNot currently listed
Published2020-07-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the Neural Autonomic Transport System (NATS) messaging services in use by the NGINX Controller do not require any form of authentication, so any successful connection would be authorized.

Weakness classification

  • nvd@nist.gov: CWE-306

Primary references