Skip to content
OpenAdvisories
Unscored CVE-2020-5916 EUVD-2020-27070GHSA-r8qr-9pg9-x57w

In BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role and higher privileged roles can perform arbi…

Published Aug 26, 2020 · Updated Aug 4, 2024 · Assigned by f5

Description

In BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role and higher privileged roles can perform arbitrary file reads outside of the web root directory.

Affected products

VendorProductAffectedFixed
— BIG-IP 15.1.0-15.1.0.4, 15.0.0-15.0.1.3 —

References