The vulnerabilities of BIG-IP and BIG-IQ access control and remote authentication mechanisms, related to access control errors, allow attackers to escalate their privileges.

🗓️ 22 Apr 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Access control and remote authentication flaws enable privilege escalation in policy manager and control devices.

Reporter	Title	Published	Views	Family All 10
CNVD	F5 Unspecified Vulnerability in BIG-IP and BIG-IQ	31 Mar 202000:00	–	cnvd
CVE	CVE-2020-5858	27 Mar 202014:31	–	cve
Cvelist	CVE-2020-5858	27 Mar 202014:31	–	cvelist
EUVD	EUVD-2020-27012	7 Oct 202500:30	–	euvd
F5 Networks	K36814487: BIG-IP tmsh vulnerability CVE-2020-5858	21 Feb 202318:33	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP tmsh vulnerability (K36814487)	27 Mar 202000:00	–	nessus
NVD	CVE-2020-5858	27 Mar 202015:15	–	nvd
OSV	CVE-2020-5858	27 Mar 202015:15	–	osv
Prion	Command injection	27 Mar 202015:15	–	prion
RedhatCVE	CVE-2020-5858	22 May 202517:42	–	redhatcve

Vulners

Node

f5_networks,big-ip_global_traffic_managerRange11.5.0–11.6.0

f5_networks,big-ip_access_policy_managerRange11.5.2–11.6.5

f5_networks,big-ip_access_policy_managerRange12.1.0–12.1.5

f5_networks,big-ip_access_policy_managerRange13.1.0–13.1.3

f5_networks,big-ip_access_policy_managerRange14.1.0–14.1.2

f5_networks,big-ip_access_policy_managerRange15.0.0–15.0.1

f5_networks,big-ip_advanced_firewall_managerRange11.5.2–11.6.5

f5_networks,big-ip_advanced_firewall_managerRange12.1.0–12.1.5

f5_networks,big-ip_advanced_firewall_managerRange13.1.0–13.1.3

f5_networks,big-ip_advanced_firewall_managerRange14.1.0–14.1.2

f5_networks,big-ip_advanced_firewall_managerRange15.0.0–15.0.1

f5_networks,big-ip_analyticsRange11.5.2–11.6.5

f5_networks,big-ip_analyticsRange12.1.0–12.1.5

f5_networks,big-ip_analyticsRange13.1.0–13.1.3

f5_networks,big-ip_analyticsRange14.1.0–14.1.2

f5_networks,big-ip_analyticsRange15.0.0–15.0.1

f5_networks,big-ip_application_acceleration_managerRange11.5.2–11.6.5

f5_networks,big-ip_application_acceleration_managerRange12.1.0–12.1.5

f5_networks,big-ip_application_acceleration_managerRange13.1.0–13.1.3

f5_networks,big-ip_application_acceleration_managerRange14.1.0–14.1.2

f5_networks,big-ip_application_acceleration_managerRange15.0.0–15.0.1

f5_networks,big-ip_application_security_managerRange11.5.2–11.6.5

f5_networks,big-ip_application_security_managerRange12.1.0–12.1.5

f5_networks,big-ip_application_security_managerRange13.1.0–13.1.3

f5_networks,big-ip_application_security_managerRange14.1.0–14.1.2

f5_networks,big-ip_application_security_managerRange15.0.0–15.0.1

f5_networks,big-ip_dnsRange11.5.2–11.6.5

f5_networks,big-ip_dnsRange12.1.0–12.1.5

f5_networks,big-ip_dnsRange13.1.0–13.1.3

f5_networks,big-ip_dnsRange14.1.0–14.1.2

f5_networks,big-ip_dnsRange15.0.0–15.0.1

f5_networks,big-ip_edge_gatewayRange11.5.2–11.6.5

f5_networks,big-ip_edge_gatewayRange12.1.0–12.1.5

f5_networks,big-ip_edge_gatewayRange13.1.0–13.1.3

f5_networks,big-ip_edge_gatewayRange14.1.0–14.1.2

f5_networks,big-ip_edge_gatewayRange15.0.0–15.0.1

f5_networks,big-ip_fraud_protection_serviceRange11.5.2–11.6.5

f5_networks,big-ip_fraud_protection_serviceRange12.1.0–12.1.5

f5_networks,big-ip_fraud_protection_serviceRange13.1.0–13.1.3

f5_networks,big-ip_fraud_protection_serviceRange14.1.0–14.1.2

f5_networks,big-ip_fraud_protection_serviceRange15.0.0–15.0.1

f5_networks,big-ip_global_traffic_managerRange11.5.2–11.6.5

f5_networks,big-ip_global_traffic_managerRange12.1.0–12.1.5

f5_networks,big-ip_global_traffic_managerRange13.1.0–13.1.3

f5_networks,big-ip_global_traffic_managerRange14.1.0–14.1.2

f5_networks,big-ip_global_traffic_managerRange15.0.0–15.0.1

f5_networks,big-ip_link_controllerRange11.5.2–11.6.5

f5_networks,big-ip_link_controllerRange12.1.0–12.1.5

f5_networks,big-ip_link_controllerRange13.1.0–13.1.3

f5_networks,big-ip_link_controllerRange14.1.0–14.1.2

f5_networks,big-ip_link_controllerRange15.0.0–15.0.1

f5_networks,big-ip_local_traffic_managerRange11.5.2–11.6.5

f5_networks,big-ip_local_traffic_managerRange12.1.0–12.1.5

f5_networks,big-ip_local_traffic_managerRange13.1.0–13.1.3

f5_networks,big-ip_local_traffic_managerRange14.1.0–14.1.2

f5_networks,big-ip_local_traffic_managerRange15.0.0–15.0.1

f5_networks,big-ip_policy_enforcement_managerRange11.5.2–11.6.5

f5_networks,big-ip_policy_enforcement_managerRange12.1.0–12.1.5

f5_networks,big-ip_policy_enforcement_managerRange13.1.0–13.1.3

f5_networks,big-ip_policy_enforcement_managerRange14.1.0–14.1.2

f5_networks,big-ip_policy_enforcement_managerRange15.0.0–15.0.1

f5_networks,big-ip_webacceleratorRange11.5.2–11.6.5

f5_networks,big-ip_webacceleratorRange12.1.0–12.1.5

f5_networks,big-ip_webacceleratorRange13.1.0–13.1.3

f5_networks,big-ip_webacceleratorRange14.1.0–14.1.2

f5_networks,big-ip_webacceleratorRange15.0.0–15.0.1

f5_networks,big-iq_centralized_managementRange5.2.0–5.4.0

f5_networks,big-iq_centralized_managementRange6.0.0–6.1.0

f5_networks,big-iq_centralized_managementMatch7.0.0

Source	Link
safe-surf	www.safe-surf.ru/upload/VULN/VULN-20200330.3.pdf
support	www.support.f5.com/csp/article/K36814487
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-5858
web	www.web.nvd.nist.gov/view/vuln/detail

22 Apr 2020 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 26.8

CVSS 37.8

EPSS0.00434