CVE-2020-5943

🗓️ 05 Nov 2020 19:23:05Reported by f5Type

BIG-IP object creation issue with REST interface in versions 14.1.0-14.1.0.1 & 14.1.2.5-14.1.2.7, unprotected sensitive fields like GTM monitor password.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-5943	5 Nov 202022:50	–	circl
CNVD	F5 BIG-IP Encryption Problem Vulnerability (CNVD-2020-63629)	5 Nov 202000:00	–	cnvd
Cvelist	CVE-2020-5943	5 Nov 202019:23	–	cvelist
EUVD	EUVD-2020-27097	7 Oct 202500:30	–	euvd
F5 Networks	K20059815: iControl REST vulnerability CVE-2020-5943	21 Feb 202318:34	–	f5
Tenable Nessus	F5 Networks BIG-IP : iControl REST vulnerability (K20059815)	3 Nov 202300:00	–	nessus
NCSC	Multiple vulnerabilities fixed in F5 BIG-IP products	3 Nov 202000:00	–	ncsc
NVD	CVE-2020-5943	5 Nov 202020:15	–	nvd
Prion	Design/Logic Flaw	5 Nov 202020:15	–	prion
RedhatCVE	CVE-2020-5943	22 May 202516:44	–	redhatcve

NVD

Node

f5 big-ip_access_policy_managerRange14.1.0–14.1.0.1

f5 big-ip_access_policy_managerRange14.1.2.5–14.1.2.7

f5 big-ip_advanced_firewall_managerRange14.1.0–14.1.0.1

f5 big-ip_advanced_firewall_managerRange14.1.2.5–14.1.2.7

f5 big-ip_advanced_web_application_firewallRange14.1.0–14.1.0.1

f5 big-ip_advanced_web_application_firewallRange14.1.2.5–14.1.2.7

f5 big-ip_analyticsRange14.1.0–14.1.0.1

f5 big-ip_analyticsRange14.1.2.5–14.1.2.7

f5 big-ip_application_acceleration_managerRange14.1.0–14.1.0.1

f5 big-ip_application_acceleration_managerRange14.1.2.5–14.1.2.7

f5 big-ip_application_security_managerRange14.1.0–14.1.0.1

f5 big-ip_application_security_managerRange14.1.2.5–14.1.2.7

f5 big-ip_ddos_hybrid_defenderRange14.1.0–14.1.0.1

f5 big-ip_ddos_hybrid_defenderRange14.1.2.5–14.1.2.7

f5 big-ip_domain_name_systemRange14.1.0–14.1.0.1

f5 big-ip_domain_name_systemRange14.1.2.5–14.1.2.7

f5 big-ip_fraud_protection_serviceRange14.1.0–14.1.0.1

f5 big-ip_fraud_protection_serviceRange14.1.2.5–14.1.2.7

f5 big-ip_global_traffic_managerRange14.1.0–14.1.0.1

f5 big-ip_global_traffic_managerRange14.1.2.5–14.1.2.7

f5 big-ip_link_controllerRange14.1.0–14.1.0.1

f5 big-ip_link_controllerRange14.1.2.5–14.1.2.7

f5 big-ip_local_traffic_managerRange14.1.0–14.1.0.1

f5 big-ip_local_traffic_managerRange14.1.2.5–14.1.2.7

f5 big-ip_policy_enforcement_managerRange14.1.0–14.1.0.1

f5 big-ip_policy_enforcement_managerRange14.1.2.5–14.1.2.7

f5 big-ip_ssl_orchestratorRange14.1.0–14.1.0.1

f5 big-ip_ssl_orchestratorRange14.1.2.5–14.1.2.7

[
  {
    "product": "BIG-IP",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "14.1.0-14.1.0.1, 14.1.2.5-14.1.2.7"
      }
    ]
  }
]

Source	Link
support	www.support.f5.com/csp/article/K20059815

21 Nov 2024 05:34Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24

CVSS 3.16.5

EPSS0.00154

CWE-327