CVE-2021-23020

CVE-2021-23020

Vendor N/A
Product Nginx Controller
Weakness CWE-330 · Insufficient randomness
Published June 1, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys.

Key dates

02Disclosure timeline

June 1, 2021 CVE published
August 3, 2024 Record updated