medium4.3
CVE-2020-5905
In version 11.6.1-11.6.5.2 of the BIG-IP system Configuration utility Network > WCCP page, the system does not sanitize all user-provided data before display.
Impact
In version 11.6.1-11.6.5.2 of the BIG-IP system Configuration utility Network > WCCP page, the system does not sanitize all user-provided data before display.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Big-Ip Access Policy Manager | from 11.6.1 through 11.6.5.2 |
| F5 | Big-Ip Advanced Firewall Manager | from 11.6.1 through 11.6.5.2 |
| F5 | Big-Ip Analytics | from 11.6.1 through 11.6.5.2 |
| F5 | Big-Ip Application Acceleration Manager | from 11.6.1 through 11.6.5.2 |
| F5 | Big-Ip Application Security Manager | from 11.6.1 through 11.6.5.2 |
| F5 | Big-Ip Domain Name System | from 11.6.1 through 11.6.5.2 |
| F5 | Big-Ip Fraud Protection Service | from 11.6.1 through 11.6.5.2 |
| F5 | Big-Ip Global Traffic Manager | from 11.6.1 through 11.6.5.2 |
| F5 | Big-Ip Link Controller | from 11.6.1 through 11.6.5.2 |
| F5 | Big-Ip Local Traffic Manager | from 11.6.1 through 11.6.5.2 |
| F5 | Big-Ip Policy Enforcement Manager | from 11.6.1 through 11.6.5.2 |