CVE-2020-5855: Medium severity F5 BIG-IP Access Policy Manager vulnerability
When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-5855?
CVE-2020-5855 is a vulnerability that allows unauthorized users to get shell access on a machine running BIG-IP Edge Client for Windows.
What is the severity level of CVE-2020-5855?
CVE-2020-5855 has a severity level of 4.3, which is considered medium.
Which software versions are affected by CVE-2020-5855?
CVE-2020-5855 affects all versions of BIG-IP Access Policy Manager for Windows up to version 15.1.0 and BIG-IP Access Policy Manager Client for Windows up to version 7.1.8.
How can unauthorized users exploit CVE-2020-5855?
Unauthorized users with physical access to an authorized user's machine can exploit CVE-2020-5855 to gain shell access as an unprivileged user.
How can I fix CVE-2020-5855?
To fix CVE-2020-5855, it is recommended to update BIG-IP Access Policy Manager and BIG-IP Access Policy Manager Client to the latest patched versions provided by F5.