Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2024-7634

NGINX Agent Vulnerability

Description

NGINX Agent's "config_dirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 NGINX Agent

Default version status: unknown

  • 2.17.0 to < 2.37.0affected

References