CVE-2020-5928

In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, BIG-IP ASM Configuration utility CSRF protection token can be reused multiple times...

K40843345: BIG-IP ASM Configuration utility vulnerability CVE-2020-5928

Security Advisory Description An attacker may use the BIG-IP ASM Configuration utility cross-site request forgery CSRF protection token multiple times. CVE-2020-5928 Impact When the token is stolen, an attacker may be able to send POST requests to the affected BIG-IP ASM system to modify the...

CVE-2020-5928

Vulnerability CVE-2020-5928 affects BIG-IP ASM Configuration utility where the CSRF protection token can be reused multiple times. Affected versions include BIG-IP ASM configurations across multiple branches (e.g., 11.x–16.x as listed by advisory). If an attacker can steal the token, they may iss...