CVE-2020-5890

5.5MEDIUM

Key Information:

Vendor
F5
Status
Big-ip
Big-iq
Vendor
CVE Published:
30 April 2020

Summary

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a QKView, credentials for binding to LDAP servers used for remote authentication of the BIG-IP administrative interface will not fully obfuscate if they contain whitespace.

Affected Version(s)

BIG-IP 15.0.0-15.0.1

BIG-IP 14.1.0-14.1.2.3

BIG-IP 13.1.0-13.1.3.3

References

https://support.f5.com/csp/article/K03318649
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.