2 lines
15 KiB
JSON
2 lines
15 KiB
JSON
{"affected":[{"affectedData":[{"product":"BIG-IP, BIG-IQ","vendor":"n/a","versions":[{"status":"affected","version":"BIG-IP 15.0.0-15.1.0.2, 14.1.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5.1, 11.5.2-11.6.5.1"},{"status":"affected","version":"BIG-IQ 7.0.0, 6.0.0-6.1.0, 5.2.0-5.4.0"}]}],"source":"f5sirt@f5.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*","matchCriteriaId":"14A4E46D-F0DB-4201-9102-EC89FACBE780","versionEndIncluding":"5.4.0","versionStartIncluding":"5.2.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*","matchCriteriaId":"F37D18F2-8C6A-4557-85DC-2A751595423C","versionEndIncluding":"6.1.0","versionStartIncluding":"6.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-iq_centralized_management:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2B589C35-55F2-4D40-B5A6-8267EE20D627","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"85EE39BF-86AA-498B-BF51-EDCD7BD01376","versionEndIncluding":"11.6.5","versionStartIncluding":"11.5.2","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"6C3B5688-0235-4D4F-A26C-440FF24A1B43","versionEndIncluding":"12.1.5","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"6FCB6C17-33AC-4E5E-8633-7490058CA51F","versionEndIncluding":"13.1.3","versionStartIncluding":"13.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"C8D4FBBA-1D87-4CCB-ADB3-42514FB0CF45","versionEndIncluding":"14.1.2","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"EFBB9E7C-08D1-4B30-AD3B-CADBF30D756B","versionEndIncluding":"15.1.0","versionStartIncluding":"15.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"C6917369-D3C2-42EB-B73B-F86CE2F17401","versionEndIncluding":"11.6.5","versionStartIncluding":"11.5.2","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"151ED6D1-AA85-4213-8F3A-8167CBEC4721","versionEndIncluding":"12.1.5","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"6F1C68BC-A3EF-4205-AD00-68CB3A8C65AF","versionEndIncluding":"13.1.3","versionStartIncluding":"13.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"D8BBC028-03DD-4412-9180-883E4252E132","versionEndIncluding":"14.1.2","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"830028B5-9BAF-439C-8166-1053C0CB9836","versionEndIncluding":"15.1.0","versionStartIncluding":"15.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"596A35D8-3644-4C45-99AC-4D201F170B83","versionEndIncluding":"11.6.5","versionStartIncluding":"11.5.2","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"5D5AA99B-08E7-4959-A3B4-41AA527B4B22","versionEndIncluding":"12.1.5","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"4AC8FD5C-AE1A-4484-BB6F-EBB6A48D21F8","versionEndIncluding":"13.1.3","versionStartIncluding":"13.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"EC15881B-9C49-4E77-9FB6-A6E60D0BCAD3","versionEndIncluding":"14.1.2","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"01BC2A57-030F-4A13-B584-BE2627EA3FE7","versionEndIncluding":"15.1.0","versionStartIncluding":"15.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"AB5A624E-40A1-4F75-8B9A-FA56510C19EE","versionEndIncluding":"11.6.5","versionStartIncluding":"11.5.2","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"9DC86A5F-C793-4848-901F-04BFB57A07F6","versionEndIncluding":"12.1.5","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"0772A366-87B9-40EC-9F63-AE0FF0EF5002","versionEndIncluding":"13.1.3","versionStartIncluding":"13.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"3D4B5A46-AA7B-416F-BA97-76A0BA232C6F","versionEndIncluding":"14.1.2","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"FD91F1A1-67F5-4547-848B-21664A9CC685","versionEndIncluding":"15.1.0","versionStartIncluding":"15.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"9BD61B6A-4E98-4D2C-92BC-FED15CEE39A6","versionEndIncluding":"11.6.5","versionStartIncluding":"11.5.2","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"2E5552A3-91CD-4B97-AD33-4F1FB4C8827A","versionEndIncluding":"12.1.5","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"8A53C692-D353-42E3-9148-F850DA11884F","versionEndIncluding":"13.1.3","versionStartIncluding":"13.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"05106312-E60D-4CF1-B4C8-6F1EF5AF8D75","versionEndIncluding":"14.1.2","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"10367A28-787A-4FAB-80AD-ADD67A751732","versionEndIncluding":"15.1.0","versionStartIncluding":"15.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"A9A8A5C3-0C38-4F46-8F98-DC3B9C58D660","versionEndIncluding":"11.6.5","versionStartIncluding":"11.5.2","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"55C2EC23-E78F-4447-BACF-21FC36ABF155","versionEndIncluding":"12.1.5","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"A35AC237-573B-4309-87EF-3945FA2449BF","versionEndIncluding":"13.1.3","versionStartIncluding":"13.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"27ABD6A3-5D67-4543-BB90-602F17A98B52","versionEndIncluding":"14.1.2","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"21E18EA5-2210-41B1-87B0-55AB16514FE2","versionEndIncluding":"15.1.0","versionStartIncluding":"15.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","matchCriteriaId":"96E945EE-A623-4775-83B9-4CF81B7EA70F","versionEndIncluding":"11.6.5","versionStartIncluding":"11.5.2","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","matchCriteriaId":"945A19E8-51EB-42FE-9BF1-12DAC78B5286","versionEndIncluding":"12.1.5","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","matchCriteriaId":"0B6C3F50-BD60-4A8C-8DBB-680DA4D6BE6D","versionEndIncluding":"13.1.3","versionStartIncluding":"13.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","matchCriteriaId":"B1B2D963-4E55-45B5-80E0-BC6FFB2122F7","versionEndIncluding":"14.1.2","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","matchCriteriaId":"317C50A2-FE92-4C78-A94A-062274E6A6A8","versionEndIncluding":"15.1.0","versionStartIncluding":"15.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"92484170-2E91-45F6-9789-B0DF3F5E6260","versionEndIncluding":"11.6.5","versionStartIncluding":"11.5.2","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"EB5007D0-BBDB-4D74-9C88-98FBA74757D1","versionEndIncluding":"12.1.5","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"FB07E847-6083-4CC8-8A62-6B9744B87088","versionEndIncluding":"13.1.3","versionStartIncluding":"13.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"D8BBD637-148A-4E1A-B2DC-129BCD121C1E","versionEndIncluding":"14.1.2","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"D748001D-340C-45C4-A2D0-0575538C5CEC","versionEndIncluding":"15.1.0","versionStartIncluding":"15.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"0A16FE69-A466-4FA6-BDDA-794C9F2B36FD","versionEndIncluding":"11.6.5","versionStartIncluding":"11.5.2","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"B7725810-66D2-4460-A174-9F3BFAD966F2","versionEndIncluding":"12.1.5","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"0620AA57-83D1-41E6-8ABB-99F3FABB10F0","versionEndIncluding":"13.1.3","versionStartIncluding":"13.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"A93AAEB9-556E-4F94-ADEC-D9C294B7F37E","versionEndIncluding":"14.1.2","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"0371EB7C-3D41-4B8C-8FA9-DC6F42442448","versionEndIncluding":"15.1.0","versionStartIncluding":"15.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"039E73A1-9F90-46A4-BFEE-5E97BAF3FAA6","versionEndIncluding":"11.6.5","versionStartIncluding":"11.5.2","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"EFD760FE-4347-4D36-B5C6-4009398060F2","versionEndIncluding":"12.1.5","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"BF552D91-612A-43E1-B2D6-02E2515FEA22","versionEndIncluding":"13.1.3","versionStartIncluding":"13.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"7C8D0EF7-9C65-4491-B358-DB1AAB0EA1FF","versionEndIncluding":"14.1.2","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"9C1BC0A8-5868-4FCA-80A5-661C3870EB7D","versionEndIncluding":"15.1.0","versionStartIncluding":"15.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"43581457-5C55-4B31-BEFA-4B59B2744BB8","versionEndIncluding":"11.6.5","versionStartIncluding":"11.5.2","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"65B76F53-7D8B-477E-8B6E-91AC0A9009FF","versionEndIncluding":"12.1.5","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"6704F0A6-16E2-4C2D-B5BD-EDDEAD5C153C","versionEndIncluding":"13.1.3","versionStartIncluding":"13.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"79B0C4C9-FCA9-4108-B349-2EFBB4A1153B","versionEndIncluding":"14.1.2","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"0585424E-3F74-400E-8199-ED964317F89F","versionEndIncluding":"15.1.0","versionStartIncluding":"15.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"On BIG-IP 15.0.0-15.1.0.2, 14.1.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5.1, and 11.5.2-11.6.5.1 and BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, in a High Availability (HA) network failover in Device Service Cluster (DSC), the failover service does not require a strong form of authentication and HA network failover traffic is not encrypted by Transport Layer Security (TLS)."},{"lang":"es","value":"En BIG-IP versiones 15.0.0-15.1.0.2, 14.1.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5.1 y 11.5.2-11.6.5.1 y BIG-IQ versiones 7.0. 0, 6.0.0-6.1.0 y 5.2.0-5.4.0, en un failover de red de High Availability (HA) en Device Service Cluster (DSC), el servicio failover no requiere una forma fuerte de autenticación y el trafico failover red HA no está cifrado por Transport Layer Security (TLS)."}],"id":"CVE-2020-5860","lastModified":"2026-06-17T03:22:21.080","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":6.8,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":8.6,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-03-27T15:15:12.443","references":[{"source":"f5sirt@f5.com","tags":["Vendor Advisory"],"url":"https://support.f5.com/csp/article/K67472032"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.f5.com/csp/article/K67472032"}],"sourceIdentifier":"f5sirt@f5.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"CWE-319"}],"source":"nvd@nist.gov","type":"Primary"}]}
|