← Back

Nginx Agent

nginx_agent

Vendor: F5 • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-7634
1F5
2Nginx Agent
Nginx Instance Manager
Jun 17, 2026
Aug 22, 2024
6.9 MEDIUM· v4
4.9 MEDIUM· v3
N/A· v2
NGINX Agent's "config_dirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory.
CVE-2023-1550
1F5
2Nginx Agent
Nginx Instance Manager
Jun 17, 2026
Mar 29, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 inserts sensitive information into a log file. An authenticated attacker with local access to read agen...Show more
Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 inserts sensitive information into a log file. An authenticated attacker with local access to read agent log files may gain access to private keys. This issue is only exposed when the non-default trace level logging is enabled. Note: NGINX Agent is included with NGINX Instance Manager and used in conjunction with NGINX API Connectivity Manager, and NGINX Management Suite Security Monitoring.Show less