CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Nginx.
CVE
CVE-2020-5909
Severity
MEDIUM
CVSS
5.4
EPSS
0.40%
Nginx
Original NVD Description
In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the agent installer, the server TLS certificate is not verified.
Related CVEs
Other vulnerabilities affecting the same vendor(s)