CVE-2020-5892 | SynScan

Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2020-5892

In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from process memory.

Published: May 1, 2020
Updated: Apr 14, 2023
CVE: CVE-2020-5892
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: Low
Score: 4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
f5 / big-ip_access_policy_manager	12.1.0	12.1.5.x
f5 / big-ip_access_policy_manager	13.0.0	13.1.3.x
f5 / big-ip_access_policy_manager	14.0.0	14.1.2.x
f5 / big-ip_edge_gateway	12.1.0	12.1.5.x
f5 / big-ip_edge_gateway	13.0.0	13.1.3.x
f5 / big-ip_edge_gateway	14.0.0	14.1.2.x
f5 / big-ip_access_policy_manager_client	7.1.5	7.1.8.x
f5 / big-ip_access_policy_manager	11.6.1	11.6.5.x
f5 / big-ip_access_policy_manager	15.0.0	15.1.0.x
f5 / big-ip_edge_gateway	15.0.0	15.1.0.x
f5 / big-ip_edge_gateway	11.6.1	11.6.5.x

https://support.f5.com/csp/article/K15838353