CVE-2020-5929
- EPSS 0.67%
- Published 25.09.2020 14:15:13
- Last modified 21.11.2024 05:34:50
In versions 13.0.0-13.0.0 HF2, 12.1.0-12.1.2 HF1, and 11.6.1-11.6.2, BIG-IP platforms with Cavium Nitrox SSL hardware acceleration cards, a Virtual Server configured with a Client SSL profile, and using Anonymous (ADH) or Ephemeral (DHE) Diffie-Hellm...
CVE-2020-5922
- EPSS 0.16%
- Published 26.08.2020 15:15:13
- Last modified 21.11.2024 05:34:50
In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, iControl REST does not implement Cross Site Request Forgery protections for users which make use of Basic Authentication in a web browser.
CVE-2020-5916
- EPSS 0.1%
- Published 26.08.2020 15:15:13
- Last modified 21.11.2024 05:34:49
In BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role and higher privileged roles can perform arbitrary file reads outside of the web root directory.
CVE-2020-5913
- EPSS 0.19%
- Published 26.08.2020 15:15:13
- Last modified 21.11.2024 05:34:49
In versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, the BIG-IP Client or Server SSL profile ignores revoked certificates, even when a valid CRL is present. This impacts SSL/TLS connections and may resu...
CVE-2020-5912
- EPSS 0.08%
- Published 26.08.2020 15:15:12
- Last modified 21.11.2024 05:34:48
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the restjavad process's dump command does not follow current best coding practices and may overwrite arbitrary files.
- EPSS 94.43%
- Published 01.07.2020 15:15:15
- Last modified 02.04.2025 18:28:41
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability i...