CVE-2020-5893

2020-04-3021:00:49

www.cve.org

AI Score

4.3

Confidence

High

EPSS

0.001

Percentile

35.9%

JSON

In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client responds to authentication requests over HTTP while sending probes for captive portal detection.

CNA Affected

[
  {
    "product": "BIG-IP Edge Client",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "7.1.5-7.1.8"
      }
    ]
  }
]

References

support.f5.com/csp/article/K97733133