Skip to content
OpenAdvisories
Unscored CVE-2020-5853 EUVD-2020-27007GHSA-7mwx-h8w3-g965

In BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, when backend s…

Published Jan 14, 2020 · Updated Aug 4, 2024 · Assigned by f5

Vendor: F5 Product: BIG-IP APM Category: Network devices

Description

In BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, when backend servers serve HTTP pages with special JavaScript code, this can lead to internal portal access name conflict.

Affected products

VendorProductAffectedFixed
F5 BIG-IP APM 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, 11.5.2-11.6.5.1 —

References