cvedb.io
CVE-2023-28724
HIGH · CVSS 7.1
EPSS exploitation probability: 0%
Published 2023-05-03T15:15:13.020 · Last modified 2026-06-17T05:48:38.237

Summary

NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

f5 — nginx_api_connectivity_manager

Does this affect you?

Add your gear to cvedb and we'll alert you only when f5 ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.