K25434422 : NGINX Controller vulnerability CVE-2020-5899

Security Advisory Description

Recovery code required to change a user’s password is transmitted and stored in the database in plain text, which allows an attacker who can intercept the database connection or have read access to the database, to request a password reset using the email address of another registered user then retrieve the recovery code. (CVE-2020-5899)

Impact

With the extracted recovery code, the attacker can change the password of the victim user. If the victim user is an admin user, the attacker can gain full control of the NGINX Controller system.