F5-K000160383: Low severity F5 NGINX Plus vulnerability
When the ngxmailauthhttpmodule module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate. This issue may occur when (1) CRAM-MD5 or APOP authentication is enabled, and (2) the authentication server permits retry by returning the Auth-Wait response header.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000160383?
The severity of F5-K000160383 is considered high due to potential termination of worker processes in NGINX.
How do I fix F5-K000160383?
To fix F5-K000160383, disable the ngx_mail_auth_http_module or ensure that CRAM-MD5 or APOP authentication is not enabled if using vulnerable versions.
Which versions are affected by F5-K000160383?
F5-K000160383 affects NGINX Plus version 32 and NGINX Open Source versions up to 1.29.6 and from 0.5.15 to 0.9.7.
What are the potential consequences of F5-K000160383?
The potential consequences of F5-K000160383 include unexpected termination of worker processes, which can disrupt email service functionality.
Is there a workaround for F5-K000160383?
Yes, a temporary workaround for F5-K000160383 is to avoid enabling the ngx_mail_auth_http_module while utilizing affected authentication methods.