K25160703: BIG-IP AFM vulnerability CVE-2020-5920

Security Advisory Description A vulnerability in the BIG-IP AFM Configuration utility may allow any authenticated BIG-IP user to perform a read-only blind SQL injection attack. CVE-2020-5920 Impact An attacker may be able to extract table name enumeration and user account names. All other data...

CVE-2020-5920

CVE-2020-5920 affects BIG-IP AFM Configuration utility. The vulnerability is a read-only blind SQL injection that authenticated BIG-IP users can exploit to enumerate table names and user accounts. Affected versions are 15.0.0–15.1.0.5, 14.1.0–14.1.2.7, 13.1.0–13.1.3.4, 12.1.0–12.1.5.1, and 11.6.1...

CVE-2020-5920

In versions 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a vulnerability in the BIG-IP AFM Configuration utility may allow any authenticated BIG-IP user to perform a read-only blind SQL injection attack...