CVE-2023-1550

Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 inserts sensitive information into a log file. An authenticated attacker with local access to read agent log files may gain access to private keys. This issue is only exposed when the non-default trace level logging is enabled. Note: NGINX Agent is included with NGINX Instance Manager and used in conjunction with NGINX API Connectivity Manager, and NGINX Management Suite Security Monitoring.

• CWE-532

• https://my.f5.com/manage/s/article/K000133135Vendor Advisory
• https://security.netapp.com/advisory/ntap-20230511-0008/
• https://my.f5.com/manage/s/article/K000133135Vendor Advisory
• https://security.netapp.com/advisory/ntap-20230511-0008/

Published

Mar 29, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1544A flaw was found in the QEMU implementation of VMWare's para…6.3
• CVE-2023-1545SQL Injection in GitHub repository nilsteampassnet/teampass …7.5
• CVE-2023-1546The MyCryptoCheckout WordPress plugin before 2.124 does not …6.1
• CVE-2023-1547Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-1548 A CWE-269: Improper Privilege Management vulnerability exis…5.5
• CVE-2023-1549The Ad Inserter WordPress plugin before 2.7.27 unserializes …7.2
• CVE-2023-1552ToolboxST prior to version 7.10 is affected by a deserializa…7.8
• CVE-2023-1554The Quick Paypal Payments WordPress plugin before 5.7.26.4 d…4.8
• CVE-2023-1555An issue has been discovered in GitLab affecting all version…4.3
• CVE-2023-1556A vulnerability was found in SourceCodester Judging Manageme…9.8
• CVE-2023-1557A vulnerability was found in SourceCodester E-Commerce Syste…9.8
• CVE-2023-1558A vulnerability classified as critical has been found in Sim…9.8