LDAP Authentication Whitespace Exposure on F5 BIG-IP Products
CVE-2020-5890
5.5MEDIUM
Summary
A vulnerability exists in the F5 BIG-IP products when creating a QKView. If the LDAP server credentials used for remote authentication contain whitespace, they are not fully obfuscated, potentially exposing sensitive information to unauthorized individuals. This can lead to unauthorized access to the BIG-IP administrative interface, compromising the security of the environment.
Affected Version(s)
BIG-IP 15.0.0-15.0.1
BIG-IP 14.1.0-14.1.2.3
BIG-IP 13.1.0-13.1.3.3
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved