PT-2020-18790
CVE-2020-5889
·
تاريخ النشر
2020-04-30
·
تاريخ التحديث
2020-05-05
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
BIG-IP versions 14.1.0 through 14.1.2.3
BIG-IP versions 15.0.0 through 15.0.1.2
BIG-IP versions 15.1.0 through 15.1.0.1
Description
A specially crafted HTTP request can lead to reflected XSS after the BIG-IP APM system rewrites the HTTP response from the untrusted backend server and sends it to the client. This occurs in the BIG-IP APM portal access.
Recommendations
For versions 14.1.0 through 14.1.2.3, update to a version that includes a fix for this issue.
For versions 15.0.0 through 15.0.1.2, update to a version that includes a fix for this issue.
For versions 15.1.0 through 15.1.0.1, update to a version that includes a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾