CVE-2020-5887: Critical severity f5 access policy manager vulnerability
On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE) may expose a mechanism for remote attackers to access local daemons and bypass port lockdown settings.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-5887?
CVE-2020-5887 is a vulnerability in BIG-IP Virtual Edition (VE) that may allow remote attackers to access local daemons and bypass port lockdown settings.
Which software versions are affected by CVE-2020-5887?
Versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3 of F5 BIG-IP Access Policy Manager, F5 BIG-IP Advanced Firewall Manager, F5 BIG-IP Analytics, F5 Big-ip Application Acceleration Manager, F5 BIG-IP Application Security Manager, F5 Big-ip Fraud Protection Service, F5 Big-ip Link Controller, F5 Big-ip Local Traffic Manager, F5 Big-ip Policy Enforcement Manager, F5 Big-ip Webaccelerator, F5 Big-ip Edge Gateway, F5 Big-ip Domain Name System, and F5 Big-ip Global Traffic Manager are affected by CVE-2020-5887.
What is the severity of CVE-2020-5887?
CVE-2020-5887 has a severity rating of 9.1, which is critical.
How can remote attackers exploit CVE-2020-5887?
Remote attackers can exploit CVE-2020-5887 by accessing local daemons and bypassing port lockdown settings.
Is there a fix for CVE-2020-5887?
Yes, F5 Networks has released a security advisory with instructions on how to mitigate the vulnerability. Please refer to the official advisory for detailed steps.