CVE-2020-5872: High severity f5 access policy manager vulnerability
On BIG-IP 14.1.0-14.1.2.3, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.4.1, when processing TLS traffic with hardware cryptographic acceleration enabled on platforms with Intel QAT hardware, the Traffic Management Microkernel (TMM) may stop responding and cause a failover event.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-5872?
CVE-2020-5872 has a severity rating that is classified as critical due to the potential for causing traffic management failures.
How do I fix CVE-2020-5872?
To fix CVE-2020-5872, you should upgrade to a version of F5 BIG-IP that is not affected, specifically versions above 14.1.2.3, 14.0.1, 13.1.3.1, and 12.1.4.1.
What systems are affected by CVE-2020-5872?
CVE-2020-5872 affects F5 BIG-IP Access Policy Manager, Advanced Firewall Manager, Analytics, Application Security Manager, and several other modules between specific version ranges.
What are the potential impacts of CVE-2020-5872?
The potential impacts of CVE-2020-5872 include system unresponsiveness and failover events during TLS traffic processing.
Is there a workaround for CVE-2020-5872?
Currently, the best approach to mitigate CVE-2020-5872 is to apply the appropriate security updates rather than relying on workarounds.