K07051153: TMUI vulnerability CVE-2020-5905

Security Advisory Description In the BIG-IP Configuration utility Network WCCP page, the system does not sanitize all user-provided data before displaying the page. CVE-2020-5905 Impact Authenticated administrative users with access to this page in the Configuration utility may inject code onto t...

CVE-2020-5905

Summary of CVE-2020-5905: In BIG-IP, the Configuration utility (TMUI) on the Network > WCCP page fails to sanitize all user-provided data before display, enabling an XSS-style attack when accessed by an authenticated administrator. Affected versions are BIG-IP 11.6.1–11.6.5.2 (per F5 advisory)...

F5 Networks BIG-IP : TMUI vulnerability (K07051153)

In the BIG-IP Configuration utility Network WCCP page, the system does not sanitize all user-provided data before displaying the page.CVE-2020-5905 Impact Authenticated administrative users with access to this page in the Configuration utility may inject code onto the WCCP pages, resulting in a a...