high7.1
CVE-2020-5880
Om BIG-IP 15.0.0-15.0.1.3 and 14.1.0-14.1.2.3, the restjavad process may expose a way for attackers to upload arbitrary files on the BIG-IP system, bypassing t…
Impact
Om BIG-IP 15.0.0-15.0.1.3 and 14.1.0-14.1.2.3, the restjavad process may expose a way for attackers to upload arbitrary files on the BIG-IP system, bypassing the authorization system. Resulting error messages may also reveal internal paths of the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Big-Ip Access Policy Manager | from 14.1.0 through 14.1.2.3 from 15.0.0 through 15.0.1.3 |
| F5 | Big-Ip Advanced Firewall Manager | from 14.1.0 through 14.1.2.3 from 15.0.0 through 15.0.1.3 |
| F5 | Big-Ip Analytics | from 14.1.0 through 14.1.2.3 from 15.0.0 through 15.0.1.3 |
| F5 | Big-Ip Application Acceleration Manager | from 14.1.0 through 14.1.2.3 from 15.0.0 through 15.0.1.3 |
| F5 | Big-Ip Application Security Manager | from 14.1.0 through 14.1.2.3 from 15.0.0 through 15.0.1.3 |
| F5 | Big-Ip Domain Name System | from 14.1.0 through 14.1.2.3 from 15.0.0 through 15.0.1.3 |
| F5 | Big-Ip Fraud Protection Service | from 14.1.0 through 14.1.2.3 from 15.0.0 through 15.0.1.3 |
| F5 | Big-Ip Global Traffic Manager | from 14.1.0 through 14.1.2.3 from 15.0.0 through 15.0.1.3 |
| F5 | Big-Ip Link Controller | from 14.1.0 through 14.1.2.3 from 15.0.0 through 15.0.1.3 |
| F5 | Big-Ip Local Traffic Manager | from 14.1.0 through 14.1.2.3 from 15.0.0 through 15.0.1.3 |
| F5 | Big-Ip Policy Enforcement Manager | from 14.1.0 through 14.1.2.3 from 15.0.0 through 15.0.1.3 |