imPC@ndo IT

Tracker / CVE-2020-5874

CVE-2020-5874

High 7.5

On BIG-IP APM 15.0.0-15.0.1.2, 14.1.0-14.1.2.3, and 14.0.0-14.0.1, in certain circumstances, an attacker sending specifically crafted requests to a BIG-IP APM virtual server may cause a disruption of service provided by the Traffic Management Microkernel(TMM).

Affected products and versions

f5 big-ip_access_policy_manager · 14.0.0 → 14.0.1
f5 big-ip_access_policy_manager · 14.1.0 → 14.1.2.3
f5 big-ip_access_policy_manager · 15.0.0 → 15.0.1.2

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References