CVE-2020-5896
published 2020-05-12CVE-2020-5896: On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions.
high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | big-ip_access_policy_manager | 11.6.1 – 11.6.5.1 | — |
| f5 | big-ip_access_policy_manager | 12.1.0 – 12.1.5.1 | — |
| f5 | big-ip_access_policy_manager | 13.1.0 – 13.1.3.3 | — |
| f5 | big-ip_access_policy_manager | 14.1.0 – 14.1.2.5 | — |
| f5 | big-ip_access_policy_manager | 15.0.0 – 15.1.0.3 | — |
| f5 | big-ip_access_policy_manager_client | — | — |
| f5 | big-ip_access_policy_manager_client | 7.1.5 – 7.1.9 | — |
| f5 | big-ip_apm | — | — |