CVE-2020-5867

8.1 highEPSS 0.5%

High (8.1). EPSS 0.5% chance of exploitation in the next 30 days.

In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages

Severity

8.1 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWEs: CWE-319, CWE-494
Published: 2020-04-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19