CVE-2020-5894
Description
On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.
CWE
- (none)
Affected
- n/a / NGINX Controller — v=< 3.4.0 [affected]
CVSS
- (none)
References
- https://support.f5.com/csp/article/K13028514 x_refsource_MISC
Source
cvelistV5-main/cves/2020/5xxx/CVE-2020-5894.json