NetSight
medium4.3

CVE-2020-5855

When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an …

Impact

When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user.

Affected products

VendorProductAffected versions
F5Big-Ip Access Policy Manager
from 11.5.2 through 11.6.5
from 12.1.0 through 12.1.5
from 13.1.0 through 13.1.3
from 14.1.0 through 14.1.2
from 15.0.0 through 15.1.0
F5Big-Ip Access Policy Manager Client
from 7.1.5 through 7.1.8

References