CVE-2020-5880

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 14.1.0 through 14.1.2.3 F5 BIG-IP versions 15.0.0 through 15.0.1.3

Description The restjavad process in the affected BIG-IP systems may allow attackers to upload arbitrary files, bypassing the authorization system. Additionally, error messages resulting from this issue may reveal internal server paths.

Recommendations For F5 BIG-IP versions 14.1.0 through 14.1.2.3, update to a version outside of this range to resolve the issue. For F5 BIG-IP versions 15.0.0 through 15.0.1.3, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the restjavad process to minimize the risk of exploitation.