medium6.7
CVE-2020-5892
In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from …
Impact
In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from process memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Big-Ip Access Policy Manager | from 11.6.1 through 11.6.5 from 12.1.0 through 12.1.5 from 13.0.0 through 13.1.3 from 14.0.0 through 14.1.2 from 15.0.0 through 15.1.0 |
| F5 | Big-Ip Access Policy Manager Client | from 7.1.5 through 7.1.8 |
| F5 | Big-Ip Edge Gateway | from 11.6.1 through 11.6.5 from 12.1.0 through 12.1.5 from 13.0.0 through 13.1.3 from 14.0.0 through 14.1.2 from 15.0.0 through 15.1.0 |