6 matches found
CVE-2020-5869
In BIG-IQ 5.2.0-7.0.0, high availability HA synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit...
CVE-2020-5869
In BIG-IQ 5.2.0-7.0.0, high availability HA synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit...
CVE-2020-5870
In BIG-IQ 5.2.0-7.0.0, high availability HA synchronization mechanisms do not use any form of authentication for connecting to the peer...
Path traversal
In BIG-IQ 5.2.0-7.0.0, high availability HA synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit...
CVE-2020-5869: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
In BIG-IQ 5.2.0-7.0.0, high availability HA synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit...
PT-2020-18771
Name of the Vulnerable Software and Affected Versions BIG-IQ versions 5.2.0 through 7.0.0 Description The high availability HA synchronization mechanisms in the affected software do not use any form of authentication for connecting to the peer. Recommendations For BIG-IQ versions 5.2.0 through...