CVE-2020-5897

CVE-2020-5897 affects the BIG-IP Edge Client Windows ActiveX in versions 7.1.5–7.1.9. It is a use-after-free that can cause memory corruption and, per the advisory, may enable code execution when a user loads a malicious page in Internet Explorer. Remediation is to upgrade to non‑vulnerable relea...

F5 BIG-IP Edge Client Information Disclosure Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. An information disclosure vulnerability exists in F5 BIG-IP Edge Client versions 7.1.5 through 7.1.8, which can be exploited b...

CVE-2020-5892

In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from process memory...

CVE-2020-5892

In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from process memory...

CVE-2020-5893

In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client responds to authentication requests over HTTP while sending probes for captive portal detection...

CVE-2020-5893

In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client responds to authentication requests over HTTP while sending probes for captive portal detection...

CVE-2020-5893

In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client responds to authentication requests over HTTP while sending probes for captive portal detection...

CVE-2020-5892

In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from process memory...

CVE-2020-5892

CVE-2020-5892 affects the Windows BIG-IP Edge Client components (APM, Edge Gateway, FirePass legacy). The root issue is that an attacker with sufficient local privileges on a client machine could obtain the full session ID from process memory. Affected versions include BIG-IP Edge Client 7.1.5–7....

CVE-2020-5893

In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client responds to authentication requests over HTTP while sending probes for captive portal detection...

CVE-2020-5893

Vulnerability details (CVE-2020-5893): F5 BIG-IP Edge Client versions 7.1.5–7.1.8 allow HTTP-based authentication traffic and captive portal probes on untrusted networks, enabling MITM attacks to intercept NTLM challenge responses. Associated advisories (K97733133) specify vulnerable products/ver...

CVE-2020-5855

When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user...

CVE-2020-5855

When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user...

Information disclosure

When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user...

CVE-2020-5855

When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user...

CVE-2020-5855

CVE-2020-5855 affects BIG-IP Edge Client for Windows with the Windows Logon Integration feature enabled. Affected versions include BIG-IP APM clients and Edge Client for Windows across multiple BIG-IP releases (e.g., 16.x, 15.x, 14.x, 13.x, 12.x, 7.x for clients). The underlying issue permits una...

F5 Networks BIG-IP : BIG-IP Edge Client for macOS vulnerability (K49827114)

BIG-IP Edge Client for macOS may allow unprivileged users to access files owned by the root account. CVE-2019-6668 Impact BIG-IP Edge Client may allow an unprivileged user on the affected macOS device to get ownership of files owned by the root account on the local client host. C Tenable Network...

F5 Unspecified Vulnerability in BIG-IP APM Clients

F5 BIG-IP APM and F5 BIG-IP APM Clients are both products of F5 Corporation of the U.S.A. F5 BIG-IP APM is an access and security solution. It provides unified access to business-critical applications and networks.F5 BIG-IP APM Clients is a suite of APM client software. A security vulnerability...

CVE-2019-6668

The BIG-IP APM Edge Client for macOS bundled with BIG-IP APM 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.5, and 11.5.1-11.6.5 may allow unprivileged users to access files owned by root...

CVE-2019-6668

The CVE-2019-6668 issue affects BIG-IP Edge Client for macOS. Vulnerable: BIG-IP APM Edge Client on macOS bundled with various APM versions (macOS client components across 11.5.1–15.0.1; with 15.x, 14.x, 13.x, 12.x, 11.x branches listed as vulnerable). Root-cause: unprivileged users may access fi...