PT-2020-18757

CVE-2020-5853

·

Published

2020-01-14

·

Updated

2020-01-17

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.2 through 11.6.5.1 F5 BIG-IP versions 12.1.0 through 12.1.5 F5 BIG-IP versions 13.1.0 through 13.1.3.2 F5 BIG-IP versions 14.0.0 through 14.1.2.3 F5 BIG-IP versions 15.0.0 through 15.1.0
Description The issue arises when backend servers serve HTTP pages containing special JavaScript code, potentially leading to an internal portal access name conflict in the BIG-IP APM portal access.
Recommendations For versions 11.5.2 through 11.6.5.1, update to a version outside of this range to resolve the issue. For versions 12.1.0 through 12.1.5, update to a version outside of this range to resolve the issue. For versions 13.1.0 through 13.1.3.2, update to a version outside of this range to resolve the issue. For versions 14.0.0 through 14.1.2.3, update to a version outside of this range to resolve the issue. For versions 15.0.0 through 15.1.0, update to a version outside of this range to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾