Skip to content
OpenAdvisories
Unscored CVE-2020-5880 EUVD-2020-27034GHSA-9vwf-7qgv-hxxc

Om BIG-IP 15.0.0-15.0.1.3 and 14.1.0-14.1.2.3, the restjavad process may expose a way for attackers to upload arbitrary files on the BIG-IP…

Published Apr 30, 2020 · Updated Aug 4, 2024 · Assigned by f5

Description

Om BIG-IP 15.0.0-15.0.1.3 and 14.1.0-14.1.2.3, the restjavad process may expose a way for attackers to upload arbitrary files on the BIG-IP system, bypassing the authorization system. Resulting error messages may also reveal internal paths of the server.

Affected products

VendorProductAffectedFixed
— BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3 —

References