Lucene search
F5CVELIST:CVE-2020-5943HistoryNov 05, 2020 - 7:23 p.m.
CVE-2020-5943
2020-11-0519:23:05
f5
www.cve.org
2
cve-2020-5943
big-ip
rest interface
securevault
cryptogram
tmsh
gtm monitor password
EPSS
0.001
Percentile
28.4%
In versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed through the REST interface, the protected fields are obfuscated in the REST response, not protected via a SecureVault cryptogram as TMSH does. One example of protected fields is the GTM monitor password.
CNA Affected
[
{
"product": "BIG-IP",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "14.1.0-14.1.0.1, 14.1.2.5-14.1.2.7"
}
]
}
]References
Related
cve
cve
CVE-2020-5943
2020-11-05 20:15:17
nessus
nessus
F5 Networks BIG-IP : iControl REST vulnerability (K20059815)
2023-11-03 00:00:00
f5
f5
K20059815 : iControl REST vulnerability CVE-2020-5943
2020-11-02 00:00:00
prion
prion
Design/Logic Flaw
2020-11-05 20:15:00
nvd
nvd
CVE-2020-5943
2020-11-05 20:15:17