BIG-IP versions 15.0.0-15.1.0.3 Improper Control of Generation of Code (‘Code Injection’) Vulnerability

Summary

The Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.

Credit:

The information has been provided by Mikhail Klyuchnikov

The original article can be found at:https://support.f5.com/csp/article/K52145254


Details

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.

 

Vulnerable Systems:

BIG-IP versions 15.0.0-15.1.0.3

BIG-IP versions 14.1.0-14.1.2.5

BIG-IP versions 13.1.0-13.1.3.3

BIG-IP versions 12.1.0-12.1.5.1

BIG-IP versions 11.6.1-11.6.5.1

 

CVE Information:

CVE-2020-5902

 

Disclosure Timeline:
Published Date:7/1/2020

Categories: News