Skip to content
OpenAdvisories
Unscored CVE-2020-5920 EUVD-2020-27074GHSA-ffrc-xhv7-q5v9

In versions 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a vulnerability in the BIG-IP AFM Conf…

Published Aug 26, 2020 · Updated Aug 4, 2024 · Assigned by f5

Description

In versions 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a vulnerability in the BIG-IP AFM Configuration utility may allow any authenticated BIG-IP user to perform a read-only blind SQL injection attack.

Affected products

VendorProductAffectedFixed
— BIG-IP AFM 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, 11.6.1-11.6.5.1 —

References