Lucene search
HistoryAug 26, 2020 - 3:15 p.m.
CVE-2020-5912
3.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
0.0004 Low
EPSS
Percentile
12.7%
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the restjavad process’s dump command does not follow current best coding practices and may overwrite arbitrary files.
Affected configurations
Node
f5big-ip_access_policy_managerRange11.6.1–11.6.5.2
ORf5big-ip_access_policy_managerRange12.1.0–12.1.5.2
ORf5big-ip_access_policy_managerRange13.1.0–13.1.3.4
ORf5big-ip_access_policy_managerRange14.1.0–14.1.2.5
ORf5big-ip_access_policy_managerRange15.0.0–15.0.1.4
ORf5big-ip_access_policy_managerRange15.1.0–15.1.0.5
ORf5big-ip_advanced_firewall_managerRange11.6.1–11.6.5.2
ORf5big-ip_advanced_firewall_managerRange12.1.0–12.1.5.2
ORf5big-ip_advanced_firewall_managerRange13.1.0–13.1.3.4
ORf5big-ip_advanced_firewall_managerRange14.1.0–14.1.2.5
ORf5big-ip_advanced_firewall_managerRange15.0.0–15.0.1.4
ORf5big-ip_advanced_firewall_managerRange15.1.0–15.1.0.5
ORf5big-ip_advanced_web_application_firewallRange11.6.1–11.6.5.2
ORf5big-ip_advanced_web_application_firewallRange12.1.0–12.1.5.2
ORf5big-ip_advanced_web_application_firewallRange13.1.0–13.1.3.4
ORf5big-ip_advanced_web_application_firewallRange14.1.0–14.1.2.5
ORf5big-ip_advanced_web_application_firewallRange15.0.0–15.0.1.4
ORf5big-ip_advanced_web_application_firewallRange15.1.0–15.1.0.5
ORf5big-ip_analyticsRange11.6.1–11.6.5.2
ORf5big-ip_analyticsRange12.1.0–12.1.5.2
ORf5big-ip_analyticsRange13.1.0–13.1.3.4
ORf5big-ip_analyticsRange14.1.0–14.1.2.5
ORf5big-ip_analyticsRange15.0.0–15.0.1.4
ORf5big-ip_analyticsRange15.1.0–15.1.0.5
ORf5big-ip_application_acceleration_managerRange11.6.1–11.6.5.2
ORf5big-ip_application_acceleration_managerRange12.1.0–12.1.5.2
ORf5big-ip_application_acceleration_managerRange13.1.0–13.1.3.4
ORf5big-ip_application_acceleration_managerRange14.1.0–14.1.2.5
ORf5big-ip_application_acceleration_managerRange15.0.0–15.0.1.4
ORf5big-ip_application_acceleration_managerRange15.1.0–15.1.0.5
ORf5big-ip_application_security_managerRange11.6.1–11.6.5.2
ORf5big-ip_application_security_managerRange12.1.0–12.1.5.2
ORf5big-ip_application_security_managerRange13.1.0–13.1.3.4
ORf5big-ip_application_security_managerRange14.1.0–14.1.2.5
ORf5big-ip_application_security_managerRange15.0.0–15.0.1.4
ORf5big-ip_application_security_managerRange15.1.0–15.1.0.5
ORf5big-ip_ddos_hybrid_defenderRange11.6.1–11.6.5.2
ORf5big-ip_ddos_hybrid_defenderRange12.1.0–12.1.5.2
ORf5big-ip_ddos_hybrid_defenderRange13.1.0–13.1.3.4
ORf5big-ip_ddos_hybrid_defenderRange14.1.0–14.1.2.5
ORf5big-ip_ddos_hybrid_defenderRange15.0.0–15.0.1.4
ORf5big-ip_ddos_hybrid_defenderRange15.1.0–15.1.0.5
ORf5big-ip_domain_name_systemRange11.6.1–11.6.5.2
ORf5big-ip_domain_name_systemRange12.1.0–12.1.5.2
ORf5big-ip_domain_name_systemRange13.1.0–13.1.3.4
ORf5big-ip_domain_name_systemRange14.1.0–14.1.2.5
ORf5big-ip_domain_name_systemRange15.0.0–15.0.1.4
ORf5big-ip_domain_name_systemRange15.1.0–15.1.0.5
ORf5big-ip_fraud_protection_serviceRange11.6.1–11.6.5.2
ORf5big-ip_fraud_protection_serviceRange12.1.0–12.1.5.2
ORf5big-ip_fraud_protection_serviceRange13.1.0–13.1.3.4
ORf5big-ip_fraud_protection_serviceRange14.1.0–14.1.2.5
ORf5big-ip_fraud_protection_serviceRange15.0.0–15.0.1.4
ORf5big-ip_fraud_protection_serviceRange15.1.0–15.1.0.5
ORf5big-ip_global_traffic_managerRange11.6.1–11.6.5.2
ORf5big-ip_global_traffic_managerRange12.1.0–12.1.5.2
ORf5big-ip_global_traffic_managerRange13.1.0–13.1.3.4
ORf5big-ip_global_traffic_managerRange14.1.0–14.1.2.5
ORf5big-ip_global_traffic_managerRange15.0.0–15.0.1.4
ORf5big-ip_global_traffic_managerRange15.1.0–15.1.0.5
ORf5big-ip_link_controllerRange11.6.1–11.6.5.2
ORf5big-ip_link_controllerRange12.1.0–12.1.5.2
ORf5big-ip_link_controllerRange13.1.0–13.1.3.4
ORf5big-ip_link_controllerRange14.1.0–14.1.2.5
ORf5big-ip_link_controllerRange15.0.0–15.0.1.4
ORf5big-ip_link_controllerRange15.1.0–15.1.0.5
ORf5big-ip_local_traffic_managerRange11.6.1–11.6.5.2
ORf5big-ip_local_traffic_managerRange12.1.0–12.1.5.2
ORf5big-ip_local_traffic_managerRange13.1.0–13.1.3.4
ORf5big-ip_local_traffic_managerRange14.1.0–14.1.2.5
ORf5big-ip_local_traffic_managerRange15.0.0–15.0.1.4
ORf5big-ip_local_traffic_managerRange15.1.0–15.1.0.5
ORf5big-ip_policy_enforcement_managerRange11.6.1–11.6.5.2
ORf5big-ip_policy_enforcement_managerRange12.1.0–12.1.5.2
ORf5big-ip_policy_enforcement_managerRange13.1.0–13.1.3.4
ORf5big-ip_policy_enforcement_managerRange14.1.0–14.1.2.5
ORf5big-ip_policy_enforcement_managerRange15.0.0–15.0.1.4
ORf5big-ip_policy_enforcement_managerRange15.1.0–15.1.0.5
ORf5ssl_orchestratorRange11.6.1–11.6.5.2
ORf5ssl_orchestratorRange12.1.0–12.1.5.2
ORf5ssl_orchestratorRange13.1.0–13.1.3.4
ORf5ssl_orchestratorRange14.1.0–14.1.2.5
ORf5ssl_orchestratorRange15.0.0–15.0.1.4
ORf5ssl_orchestratorRange15.1.0–15.1.0.5
References
Related
nessus
nessus
F5 Networks BIG-IP : BIG-IP restjavad vulnerability (K12936322)
2020-08-26 00:00:00
cve
cve
CVE-2020-5912
2020-08-26 15:15:12
prion
prion
Command injection
2020-08-26 15:15:00
cvelist
cvelist
CVE-2020-5912
2020-08-26 14:31:13
f5
f5
K12936322 : BIG-IP restjavad vulnerability CVE-2020-5912
2020-08-26 00:00:00
3.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
0.0004 Low
EPSS
Percentile
12.7%
Related for NVD:CVE-2020-5912