CVE-2023-1550: f5 nginx agent +1 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2023-1550

CVSS 5.5 · Medium EPSS 0,22%

Kerentanan Insertion of Sensitive Information into Log File pada f5 nginx agent, f5 nginx instance manager. Skor CVSS 3.1 5.5 (Medium) menurut f5.com.

Deskripsi (NVD)

Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 inserts sensitive information into a log file. An authenticated attacker with local access to read agent log files may gain access to private keys. This issue is only exposed when the non-default trace level logging is enabled. Note: NGINX Agent is included with NGINX Instance Manager and used in conjunction with NGINX API Connectivity Manager, and NGINX Management Suite Security Monitoring.

Rincian

Terbit di NVD: 29 Maret 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.5 (Medium), sumber f5.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-532: Insertion of Sensitive Information into Log File
EPSS (30 hari): 0,22% peluang dieksploitasi; lebih tinggi dari 11,3% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
f5	nginx agent	Versi 2.0.0 hingga sebelum 2.23.3
f5	nginx instance manager	Versi 2.0.0 hingga sebelum 2.9.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://my.f5.com/manage/s/article/K000133135 advisory vendor
https://security.netapp.com/advisory/ntap-20230511-0008/

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.