CVE-2020-27723: High severity f5 access policy manager vulnerability
Published Dec 24, 2020
·Updated
In versions 14.1.0-14.1.3 and 13.1.0-13.1.3.4, a BIG-IP APM virtual server processing PingAccess requests may lead to a restart of the Traffic Management Microkernel (TMM) process.
Affected Software
3 affected components
F5 BIG-IP Access Policy Manager>=13.1.0<13.1.3.5
F5 BIG-IP Access Policy Manager>=14.1.0<14.1.3.1
F5 BIG-IP Access Policy Manager>=15.0.0<15.1.0
Event History
Dec 24, 2020
CVE Published
via MITRE·03:09 PM
Data Sourced
via MITRE·03:09 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-27723?
CVE-2020-27723 is a vulnerability that affects F5 Big-IP Access Policy Manager (APM) versions 14.1.0-14.1.3 and 13.1.0-13.1.3.4.
2
What is the severity of CVE-2020-27723?
CVE-2020-27723 has a severity score of 7.5 (high).
3
What is the affected software for CVE-2020-27723?
CVE-2020-27723 affects F5 Big-IP Access Policy Manager (APM) versions 14.1.0-14.1.3 and 13.1.0-13.1.3.4.
4
How does CVE-2020-27723 affect F5 Big-IP APM virtual servers?
CVE-2020-27723 may lead to a restart of the Traffic Management Microkernel (TMM) process in F5 Big-IP APM virtual servers processing PingAccess requests.
5
How can I fix CVE-2020-27723?
To fix CVE-2020-27723, update F5 Big-IP APM to a version higher than 14.1.3.4 or 13.1.3.4 depending on the affected version.