K12936322 : BIG-IP restjavad vulnerability CVE-2020-5912

2020-08-2600:00:00

my.f5.com

0.0004 Low

EPSS

Percentile

12.7%

JSON

Security Advisory Description

The restjavad process dump command does not follow current best coding practices and may overwrite arbitrary files. (CVE-2020-5912)

Impact

A locally authenticated attacker may exploit this vulnerability by overwriting arbitrary files on the file system.

CPENameOperatorVersion
f5 ssl orchestratoreq13.0.0
f5 ssl orchestratoreq13.1.0
f5 ssl orchestratoreq14.0.0
f5 ssl orchestratoreq14.1.0
f5 ssl orchestratoreq15.0.0
f5 ssl orchestratoreq15.1.0
f5 ssl orchestratoreq16.0.0
big-ip afmeq11.6.1
big-ip afmeq11.6.2
big-ip afmeq11.6.3

Name	Operator	Version
f5 ssl orchestrator	eq	13.0.0
f5 ssl orchestrator	eq	13.1.0
f5 ssl orchestrator	eq	14.0.0
f5 ssl orchestrator	eq	14.1.0
f5 ssl orchestrator	eq	15.0.0
f5 ssl orchestrator	eq	15.1.0
f5 ssl orchestrator	eq	16.0.0
big-ip afm	eq	11.6.1
big-ip afm	eq	11.6.2
big-ip afm	eq	11.6.3

Rows per page:

1-10 of 2091

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for F5:K12936322