K10251014 : BIG-IP VE TMM vulnerability CVE-2020-5887

Security Advisory Description

BIG-IP Virtual Edition (VE) may expose a mechanism for remote attackers to access local daemons and bypass port lockdown settings. (CVE-2020-5887)

Impact

The vulnerability can occur on BIG-IP VE systems with the following configuration:

• An IPv6 forwarding virtual server
• An IPv6 floating self IP address
• A virtual server has the HTTP profile configured with http explicit proxyenabled and default-connect-handling set toallow

Hosts in adjacent networks may be able to bypass port lockdown settings on BIG-IP VE hosts.