[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAjYToA_jL3-WVmuEGb4-lvVFySE5FPkmNZKGCN_rnM8":3,"g5a-risk:CVE-2023-28724":124},{"success":4,"data":5,"meta":121},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":48,"references":49,"referencesCount":64,"weaknesses":65,"weaknessesCount":74,"isActivelyExploited":75,"cisaInfo":26,"otxData":26,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":119,"notableEvents":120},"CVE-2023-28724","What is CVE-2023-28724?","NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager.  \n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager a...","2023-05-03T15:15:13.02","2025-04-10T20:32:16.72",7.1,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"f5sirt@f5.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.2,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00171,[33,33,33,33,33,33,33],"High",[37,42,45],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"f5","nginx_api_connectivity_manager","*","cpe:2.3:a:f5:nginx_api_connectivity_manager:*:*:*:*:*:*:*:*",{"vendor":38,"product":43,"version":40,"criteria":44,"vulnerable":4},"nginx_instance_manager","cpe:2.3:a:f5:nginx_instance_manager:*:*:*:*:*:*:*:*",{"vendor":38,"product":46,"version":40,"criteria":47,"vulnerable":4},"nginx_security_monitoring","cpe:2.3:a:f5:nginx_security_monitoring:*:*:*:*:*:*:*:*",3,[50,55,60,62],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fmy.f5.com\u002Fmanage\u002Fs\u002Farticle\u002FK000133233","F5",[54],"Vendor Advisory",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20230609-0006\u002F","Netapp",[59],"Third Party Advisory",{"url":51,"source":52,"tags":61},[54],{"url":56,"source":57,"tags":63},[59],4,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",1,false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2023-28724? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-28724, a high severity cyber security vulnerability from 2023. NGINX Management Suite default file permissions are set suc...","CVE-2023-28724, CVE-2023-28724 vulnerability, CVE-2023-28724 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, f5 security, nginx_api_connectivity_manager vulnerability, nginx_instance_manager vulnerability, nginx_security_monitoring vulnerability","\u002Fwhat-is\u002Fcve-2023-28724",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-28724","Cybersecurity","CVE-2023-28724, CVE-2023-28724 vulnerability, CVE-2023-28724 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":26,"Negate":26,"Nodes":104},[105],{"Operator":106,"Negate":26,"CPEMatch":107},"OR",[108,112,116],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":109,"VersionStartExcluding":26,"VersionStartIncluding":110,"VersionEndExcluding":111,"VersionEndIncluding":26},"EC45BFDB-391A-4EB6-B74E-1C80000B044F","1.0.0","1.5.0",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":114,"VersionEndExcluding":115,"VersionEndIncluding":26},"EAEC7716-B3B5-4640-A094-38379425DB83","2.0.0","2.9.0",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":110,"VersionEndExcluding":118,"VersionEndIncluding":26},"BBEBF811-2D7D-427C-805A-D430360C3FA3","1.3.0",[],[],{"lastModified":11,"cacheTime":122,"version":123},1792256956031,"2.0",{"score":125,"band":126,"action":127,"scoredAt":128},45,"Medium","Plan remediation","2026-10-16T06:57:52.220944+00:00"]