An attacker may use the BIG-IP ASM Configuration utility cross-site request forgery (CSRF) protection token multiple times. (CVE-2020-5928)
Impact
When the token is stolen, an attacker may be able to send POST requests to the affected BIG-IP ASM system to modify the configuration.