CVE-2020-5912
published 2020-08-26CVE-2020-5912: In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the restjavad process's dump…
PriorityP434high7.1CVSS 3.1
AVLACLPRLUINSUCNIHAH
EPSS
0.32%
24.2th percentile
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the restjavad process's dump command does not follow current best coding practices and may overwrite arbitrary files.
Affected
99 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | big-ip_aam | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | >= 11.6.1 < 11.6.5.2 | 11.6.5.2 |
| f5 | big-ip_access_policy_manager | >= 12.1.0 < 12.1.5.2 | 12.1.5.2 |
| f5 | big-ip_access_policy_manager | >= 13.1.0 < 13.1.3.4 | 13.1.3.4 |
| f5 | big-ip_access_policy_manager | >= 14.1.0 < 14.1.2.5 | 14.1.2.5 |
| f5 | big-ip_access_policy_manager | >= 15.0.0 < 15.0.1.4 | 15.0.1.4 |
| f5 | big-ip_access_policy_manager | >= 15.1.0 < 15.1.0.5 | 15.1.0.5 |
| f5 | big-ip_advanced_firewall_manager | >= 11.6.1 < 11.6.5.2 | 11.6.5.2 |
| f5 | big-ip_advanced_firewall_manager | >= 12.1.0 < 12.1.5.2 | 12.1.5.2 |
| f5 | big-ip_advanced_firewall_manager | >= 13.1.0 < 13.1.3.4 | 13.1.3.4 |
| f5 | big-ip_advanced_firewall_manager | >= 14.1.0 < 14.1.2.5 | 14.1.2.5 |
| f5 | big-ip_advanced_firewall_manager | >= 15.0.0 < 15.0.1.4 | 15.0.1.4 |
| f5 | big-ip_advanced_firewall_manager | >= 15.1.0 < 15.1.0.5 | 15.1.0.5 |
| f5 | big-ip_advanced_waf | — | — |
| f5 | big-ip_advanced_web_application_firewall | >= 11.6.1 < 11.6.5.2 | 11.6.5.2 |
| f5 | big-ip_advanced_web_application_firewall | >= 12.1.0 < 12.1.5.2 | 12.1.5.2 |
| f5 | big-ip_advanced_web_application_firewall | >= 13.1.0 < 13.1.3.4 | 13.1.3.4 |
| f5 | big-ip_advanced_web_application_firewall | >= 14.1.0 < 14.1.2.5 | 14.1.2.5 |
| f5 | big-ip_advanced_web_application_firewall | >= 15.0.0 < 15.0.1.4 | 15.0.1.4 |
| f5 | big-ip_advanced_web_application_firewall | >= 15.1.0 < 15.1.0.5 | 15.1.0.5 |
| f5 | big-ip_afm | — | — |
| f5 | big-ip_analytics | — | — |
| f5 | big-ip_analytics | >= 11.6.1 < 11.6.5.2 | 11.6.5.2 |
| f5 | big-ip_analytics | >= 12.1.0 < 12.1.5.2 | 12.1.5.2 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
nvdv2.03.6LOWAV:L/AC:L/Au:N/C:N/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
F5
CVE-2020-5912: In BIG-IP versions 15
vendor_f5·2020-08-26·CVSS 7.1
CVE-2020-5912 [HIGH] CVE-2020-5912: In BIG-IP versions 15
CVE-2020-5912: In BIG-IP versions 15
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the restjavad process's dump command does not follow current best coding practices and may overwrite arbitrary files.
Affected Products: BIG-IP AAM, BIG-IP AFM, BIG-IP APM, BIG-IP ASM, BIG-IP Advanced WAF, BIG-IP Analytics, BIG-IP DHD, BIG-IP DNS, BIG-IP FPS, BIG-IP GTM, BIG-IP LTM, BIG-IP Link Controller, BIG-IP PEM, Ssl Orchestrator
Affected Versions: 11.6.1 - 11.6.5.2; 12.1.0 - 12.1.5.2; 13.1.0 - 13.1.3.4; 14.1.0 - 14.1.2.5; 15.0.0 - 15.0.1.4; 15.1.0 - 15.1.0.5
F5 Advisory Articles: K12936322
F5 References: https://support.f5.com/csp/article/K12936322
GHSA
GHSA-qjr3-cm34-fpxg: In BIG-IP versions 15
ghsa_unreviewed·2022-05-24
CVE-2020-5912 [LOW] CWE-20 GHSA-qjr3-cm34-fpxg: In BIG-IP versions 15
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the restjavad process's dump command does not follow current best coding practices and may overwrite arbitrary files.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-08-26
Published