F5-K000162617: High severity F5 NGINX Ingress Controller vulnerability
NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external authentication can happen.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.7.0
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of F5 NGINX Ingress Controller that implement an externalAuth policy for ingress are exposed. The issue affects protected paths whose access control depends on an external OAuth identity provider response.
What does an attacker need to exploit it?
The vulnerability is remotely exploitable and does not require privileges or user interaction. An attacker can exploit mishandling of an OAuth IdP HTTP response to obtain unauthenticated access before external authentication completes.
What is the security impact?
An attacker may gain unauthorized access to paths intended to be protected by external authentication. The provided vector indicates high confidentiality impact, with no indicated integrity or availability impact.