CVE-2022-30535

—

CVSS 3.1

6.5 medium

EPSS

<1%p50

Published

Aug 4, 2022 (Aug 4, 2022)

Modified

Jun 17, 2026

Description

In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can obtain the secrets available to the NGINX Ingress Controller. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vendors: f5
Products: nginx ingress controller
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.