Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 5:42 p.m.5 views

CVE-2020-5873

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and BIG-IQ 5.2.0-7.1.0, a user associated with the Resource Administrator role who has access to the secure copy scp utility but does not have access to Advanced Shell bash can execute arbitrary commands...

7.2CVSS7.5AI score0.01386EPSS
Exploits0References1
NVD
NVD
added 2024/02/14 5:15 p.m.27 views

CVE-2024-21782

BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy scp utility but do not have access to Advanced shell bash can execute arbitrary commands with a specially crafted command string. This vulnerability is due to an incomplete fix for CVE-2020-5873...

6.7CVSS7.2AI score0.00178EPSS
Exploits0References1
Prion
Prion
added 2024/02/14 5:15 p.m.22 views

Command injection

BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy scp utility but do not have access to Advanced shell bash can execute arbitrary commands with a specially crafted command string. This vulnerability is due to an incomplete fix for CVE-2020-5873...

4CVSS8AI score0.01386EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/02/14 4:30 p.m.29 views

CVE-2024-21782 BIG-IP and BIG-IQ secure copy vulnerability

BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy scp utility but do not have access to Advanced shell bash can execute arbitrary commands with a specially crafted command string. This vulnerability is due to an incomplete fix for CVE-2020-5873...

6.7CVSS7.5AI score0.00178EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/02/14 12:0 a.m.12 views

F5 Networks BIG-IP : BIG-IP and BIG-IQ scp vulnerability (K98606833)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.9 / 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K98606833 advisory. BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy scp...

7.2CVSS7.2AI score0.01386EPSS
Exploits0References2
F5 Networks
F5 Networks
added 2023/02/21 8:0 p.m.29 views

K03585731: F5 secure shell vulnerability CVE-2020-5873

Security Advisory Description A user associated with the Resource Administrator role who has access to the secure copy scp utility but does not have access to Advanced Shell bash can execute arbitrary commands using a maliciously crafted scp request. CVE-2020-5873 Impact An authenticated user wit...

7.2CVSS6.9AI score0.01386EPSS
Exploits0Affected Software12
NVD
NVD
added 2020/04/30 9:15 p.m.27 views

CVE-2020-5873

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and BIG-IQ 5.2.0-7.1.0, a user associated with the Resource Administrator role who has access to the secure copy scp utility but does not have access to Advanced Shell bash can execute arbitrary commands...

7.2CVSS7AI score0.01386EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/04/30 8:21 p.m.28 views

CVE-2020-5873

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and BIG-IQ 5.2.0-7.1.0, a user associated with the Resource Administrator role who has access to the secure copy scp utility but does not have access to Advanced Shell bash can execute arbitrary commands...

7AI score0.01386EPSS
Exploits0References1
CVE
CVE
added 2020/04/30 8:21 p.m.68 views

CVE-2020-5873

CVE-2020-5873 affects BIG-IP and BIG-IQ: a Resource Administrator user with access to scp but not bash can run arbitrary commands via a crafted scp request. The issue has been partially addressed by vendor advisories; fixes are issued in multiple tracks: BIG-IP 15.x (fix in 15.1.0, with other bra...

7.2CVSS6.9AI score0.01386EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/04/30 12:0 a.m.27 views

F5 Networks BIG-IP : F5 secure shell vulnerability (K03585731)

A user associated with the Resource Administrator role who has access to the secure copy scp utilitybut does not have access to Advanced Shell bashcan execute arbitrary commands using a maliciously crafted scp request.CVE-2020-5873 Impact An authenticated user with Resource Administrator role can...

7.2CVSS7.1AI score0.01386EPSS
Exploits0References2
Rows per page
Query Builder