TI-2023-01464 Aliases CVE-2023-1550 GHSA-68qv-j282-p3jm

NGINX Agent vulnerability CVE-2023-1550

LOW 24CWE-532Published 2023-03-29 · Updated 2025-02-13

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-532.

Summary

Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 inserts sensitive information into a log file. An authenticated attacker with local access to read agent log files may gain access to private keys. This issue is only exposed when the non-default trace level logging is enabled. Note: NGINX Agent is included with NGINX Instance Manager and used in conjunction with NGINX API Connectivity Manager, and NGINX Management Suite Security Monitoring.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00218 12th percentileScored 2026-11-07

Fix Fixed NGINX Agent (F5): 2.23.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
F5	NGINX Agent	2.0 to before 2.23.3	2.23.3	Patch available	CNA

NGINX Agent VendorF5 Affected 2.0 to before 2.23.3 Fixed in 2.23.3 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:f5:nginx_agent::::::::	2.0.0 to before 2.23.3	Vulnerable	F5
cpe:2.3:a:f5:nginx_instance_manager::::::::	2.0.0 to before 2.9.0	Vulnerable	F5

cpe:2.3:a:f5:nginx_agent:*:*:*:*:*:*:*:* Versions 2.0.0 to before 2.23.3 Vulnerable ·F5
cpe:2.3:a:f5:nginx_instance_manager:*:*:*:*:*:*:*:* Versions 2.0.0 to before 2.9.0 Vulnerable ·F5

Remediation

Fix · CNA NGINX Agent (F5) Fixed in 2.23.3

Timeline

2026-10-02 Threatist record created from CVE-2023-1550
2026-10-03 Alias added: GHSA-68qv-j282-p3jm

References

Advisory 1

https://my.f5.com/manage/s/article/K000133135

Other 1

https://security.netapp.com/advisory/ntap-20230511-0008/

TI-2024-07074 NGINX Agent Vulnerability CVSS 4.0MEDIUM 6.9
TI-2026-42804 NGINX Agent Vulnerability CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences