[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5mjSLhUlSNwRCGLOzof7ReY7Y789FZPVqPdXI8Ewl7w":3,"g5a-risk:CVE-2020-5864":117},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":37,"epssPercentile":24,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":49,"references":50,"referencesCount":49,"weaknesses":60,"weaknessesCount":69,"isActivelyExploited":70,"cisaInfo":24,"otxData":24,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":113,"notableEvents":114},"CVE-2020-5864","What is CVE-2020-5864?","In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default.","2020-04-23T19:15:12.903","2020-04-30T19:15:14.7",7.4,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":24,"CVSSMetricV2":27,"CVSSMetricV40":24},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":25,"ImpactScore":26},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":21,"IntegrityImpact":21,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":21,"ExploitCodeMaturity":24,"RemediationLevel":24,"ReportConfidence":24,"TemporalScore":24,"TemporalSeverity":24,"ConfidentialityRequirement":24,"IntegrityRequirement":24,"AvailabilityRequirement":22,"ModifiedAttackVector":24,"ModifiedAttackComplexity":24,"ModifiedPrivilegesRequired":24,"ModifiedUserInteraction":24,"ModifiedScope":24,"ModifiedConfidentialityImpact":24,"ModifiedIntegrityImpact":24,"ModifiedAvailabilityImpact":24,"EnvironmentalScore":24,"EnvironmentalSeverity":24},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.2,[28],{"Source":16,"Type":17,"CVSSData":29,"BaseSeverity":32,"ExploitabilityScore":35,"ImpactScore":36,"ACInsufInfo":24,"ObtainAllPrivilege":24,"ObtainUserPrivilege":24,"ObtainOtherPrivilege":24,"UserInteractionRequired":24},{"Version":30,"VectorString":31,"AccessVector":20,"AccessComplexity":32,"Authentication":22,"ConfidentialityImpact":33,"IntegrityImpact":33,"AvailabilityImpact":22,"BaseScore":34,"BaseSeverity":24,"Exploitability":24,"RemediationLevel":24,"ReportConfidence":24,"TemporalScore":24,"CollateralDamagePotential":24,"TargetDistribution":24,"ConfidentialityRequirement":24,"IntegrityRequirement":24,"AvailabilityRequirement":24,"EnvironmentalScore":24},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","MEDIUM","PARTIAL",5.8,8.6,4.9,0.01059,[37,37,37,37,37,37,37],"High",[41,46],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"f5","nginx_controller","*","cpe:2.3:a:f5:nginx_controller:*:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":47,"criteria":48,"vulnerable":4},"1.0.1","cpe:2.3:a:f5:nginx_controller:1.0.1:*:*:*:*:*:*:*",2,[51,55],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20200430-0005\u002F","Netapp",[],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fsupport.f5.com\u002Fcsp\u002Farticle\u002FK27205552","F5",[59],"Vendor Advisory",[61],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",1,false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2020-5864? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-5864, a high severity cyber security vulnerability from 2020. In versions of NGINX Controller prior to 3.2.0, communicatio...","CVE-2020-5864, CVE-2020-5864 vulnerability, CVE-2020-5864 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, f5 security, nginx_controller vulnerability","\u002Fwhat-is\u002Fcve-2020-5864",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":9,"dateModified":10,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-5864","Cybersecurity","CVE-2020-5864, CVE-2020-5864 vulnerability, CVE-2020-5864 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":24,"Negate":24,"Nodes":99},[100],{"Operator":101,"Negate":24,"CPEMatch":102},"OR",[103,107,111],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":104,"VersionStartExcluding":24,"VersionStartIncluding":105,"VersionEndExcluding":24,"VersionEndIncluding":106},"3CA86CB0-F33A-4B9C-AAFC-8AC3F0071A31","2.0.0","2.9.0",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":108,"VersionStartExcluding":24,"VersionStartIncluding":109,"VersionEndExcluding":110,"VersionEndIncluding":24},"514454C8-5679-45CE-B21D-DB7225E616E8","3.0.0","3.3.0",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":112,"VersionStartExcluding":24,"VersionStartIncluding":24,"VersionEndExcluding":24,"VersionEndIncluding":24},"D96CC675-BA26-4E41-B8F1-63F643E022D0",[],[],{"lastModified":10,"cacheTime":116,"version":30},1792347810981,{"score":118,"band":119,"action":120,"scoredAt":121},46,"Medium","Plan remediation","2026-10-16T06:48:28.694196+00:00"]