CVE-2020-5876

🗓️ 30 Apr 2020 21:15:16Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 22 Views

Race condition on BIG-IP for unencrypted connection attempt

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2020-5876	30 Apr 202020:30	–	cve
Cvelist	CVE-2020-5876	30 Apr 202020:30	–	cvelist
EUVD	EUVD-2020-27030	7 Oct 202500:30	–	euvd
F5 Networks	K32121038: BIG-IP mcpd vulnerability CVE-2020-5876	21 Feb 202318:33	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP mcpd vulnerability (K32121038)	30 Apr 202000:00	–	nessus
OSV	CVE-2020-5876	30 Apr 202021:15	–	osv
Prion	Race condition	30 Apr 202021:15	–	prion
RedhatCVE	CVE-2020-5876	22 May 202517:42	–	redhatcve

NVD

Node

f5 big-ip_access_policy_managerRange11.6.1–11.6.5.1

OR

f5 big-ip_access_policy_managerRange12.1.0–12.1.5.1

OR

f5 big-ip_access_policy_managerRange13.1.0–13.1.3.3

OR

f5 big-ip_access_policy_managerRange14.1.0–14.1.2.3

OR

f5 big-ip_access_policy_managerRange15.0.0–15.1.0.3

Node

f5 big-ip_advanced_firewall_managerRange11.6.1–11.6.5.1

OR

f5 big-ip_advanced_firewall_managerRange12.1.0–12.1.5.1

OR

f5 big-ip_advanced_firewall_managerRange13.1.0–13.1.3.3

OR

f5 big-ip_advanced_firewall_managerRange14.1.0–14.1.2.3

OR

f5 big-ip_advanced_firewall_managerRange15.0.0–15.1.0.3

Node

f5 big-ip_analyticsRange11.6.1–11.6.5.1

OR

f5 big-ip_analyticsRange12.1.0–12.1.5.1

OR

f5 big-ip_analyticsRange13.1.0–13.1.3.3

OR

f5 big-ip_analyticsRange14.1.0–14.1.2.3

OR

f5 big-ip_analyticsRange15.0.0–15.1.0.3

Node

f5 big-ip_application_acceleration_managerRange11.6.1–11.6.5.1

OR

f5 big-ip_application_acceleration_managerRange12.1.0–12.1.5.1

OR

f5 big-ip_application_acceleration_managerRange13.1.0–13.1.3.3

OR

f5 big-ip_application_acceleration_managerRange14.1.0–14.1.2.3

OR

f5 big-ip_application_acceleration_managerRange15.0.0–15.1.0.3

Node

f5 big-ip_application_security_managerRange11.6.1–11.6.5.1

OR

f5 big-ip_application_security_managerRange12.1.0–12.1.5.1

OR

f5 big-ip_application_security_managerRange13.1.0–13.1.3.3

OR

f5 big-ip_application_security_managerRange14.1.0–14.1.2.3

OR

f5 big-ip_application_security_managerRange15.0.0–15.1.0.3

Node

f5 big-ip_domain_name_systemRange11.6.1–11.6.5.1

OR

f5 big-ip_domain_name_systemRange12.1.0–12.1.5.1

OR

f5 big-ip_domain_name_systemRange13.1.0–13.1.3.3

OR

f5 big-ip_domain_name_systemRange14.1.0–14.1.2.3

OR

f5 big-ip_domain_name_systemRange15.0.0–15.1.0.3

Node

f5 big-ip_fraud_protection_serviceRange11.6.1–11.6.5.1

OR

f5 big-ip_fraud_protection_serviceRange12.1.0–12.1.5.1

OR

f5 big-ip_fraud_protection_serviceRange13.1.0–13.1.3.3

OR

f5 big-ip_fraud_protection_serviceRange14.1.0–14.1.2.3

OR

f5 big-ip_fraud_protection_serviceRange15.0.0–15.1.0.3

Node

f5 big-ip_global_traffic_managerRange11.6.1–11.6.5.1

OR

f5 big-ip_global_traffic_managerRange12.1.0–12.1.5.1

OR

f5 big-ip_global_traffic_managerRange13.1.0–13.1.3.3

OR

f5 big-ip_global_traffic_managerRange14.1.0–14.1.2.3

OR

f5 big-ip_global_traffic_managerRange15.0.0–15.1.0.3

Node

f5 big-ip_link_controllerRange11.6.1–11.6.5.1

OR

f5 big-ip_link_controllerRange12.1.0–12.1.5.1

OR

f5 big-ip_link_controllerRange13.1.0–13.1.3.3

OR

f5 big-ip_link_controllerRange14.1.0–14.1.2.3

OR

f5 big-ip_link_controllerRange15.0.0–15.1.0.3

Node

f5 big-ip_local_traffic_managerRange11.6.1–11.6.5.1

OR

f5 big-ip_local_traffic_managerRange12.1.0–12.1.5.1

OR

f5 big-ip_local_traffic_managerRange13.1.0–13.1.3.3

OR

f5 big-ip_local_traffic_managerRange14.1.0–14.1.2.3

OR

f5 big-ip_local_traffic_managerRange15.0.0–15.1.0.3

Node

f5 big-ip_policy_enforcement_managerRange11.6.1–11.6.5.1

OR

f5 big-ip_policy_enforcement_managerRange12.1.0–12.1.5.1

OR

f5 big-ip_policy_enforcement_managerRange13.1.0–13.1.3.3

OR

f5 big-ip_policy_enforcement_managerRange14.1.0–14.1.2.3

OR

f5 big-ip_policy_enforcement_managerRange15.0.0–15.1.0.3

Source	Link
support	www.support.f5.com/csp/article/K32121038

21 Nov 2024 05:34Current

8High risk

Vulners AI Score8

CVSS 26.8

CVSS 3.18.1

EPSS0.00304

CWE-362 CWE-319

cve-2020-5876 big-ip race condition unencrypted connection configsync ip tmm security vulnerability