2 lines
11 KiB
JSON
2 lines
11 KiB
JSON
{"affected":[{"affectedData":[{"product":"BIG-IP VE","vendor":"n/a","versions":[{"status":"affected","version":"15.1.0-15.1.0.1, 15.0.0-15.0.1.2, 14.1.0-14.1.2.3"}]}],"source":"f5sirt@f5.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"07FC84CA-3E12-43FB-ADBD-7B988DEF3A97","versionEndIncluding":"14.1.2.3","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"5FB9B7FF-E5F5-4E06-961B-6C2521373962","versionEndIncluding":"15.0.1.2","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1AD582-739F-47E6-9B0A-621D394DB963","versionEndIncluding":"15.1.0.1","versionStartIncluding":"15.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"5BEE162F-A016-4EDB-A7D1-1F87945EED3E","versionEndIncluding":"14.1.2.3","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"FE341D92-4E33-4534-A703-3CA50A2C41D0","versionEndIncluding":"15.0.1.2","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"1DBB8554-3D73-426D-B447-5052B269FFC5","versionEndIncluding":"15.1.0.1","versionStartIncluding":"15.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"7F553CD8-01FF-4616-A32C-4F4B5844A6FD","versionEndIncluding":"14.1.2.3","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"85DCB41D-C002-440E-8F2F-4210F9FDB06C","versionEndIncluding":"15.0.1.2","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"688B1066-8AC0-46D6-AE7E-CA4172FA3AFF","versionEndIncluding":"15.1.0.1","versionStartIncluding":"15.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"547D6BFB-5DE8-4027-88EF-0349400494D1","versionEndIncluding":"14.1.2.3","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"7F309ABB-6E92-4921-B1F9-34C0B47C1042","versionEndIncluding":"15.0.1.2","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"E5186859-FEA5-4F26-95E8-5676784A25A3","versionEndIncluding":"15.1.0.1","versionStartIncluding":"15.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"7881BC1C-1B10-43D4-AD4A-545D7C7C4160","versionEndIncluding":"14.1.2.3","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"7A6D4CAE-2717-4BEC-AAAD-D4DA42A2C977","versionEndIncluding":"15.0.1.2","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"AD9A6BA1-A3CB-4A80-BE59-D120E215412B","versionEndIncluding":"15.1.0.1","versionStartIncluding":"15.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","matchCriteriaId":"F6DFBD76-20DB-497D-B407-1EAA5555B49F","versionEndIncluding":"14.1.2.3","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","matchCriteriaId":"FCE8E00D-01F1-49EF-BF37-92860DD6E2CB","versionEndIncluding":"15.0.1.2","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","matchCriteriaId":"D37C2654-3B0F-47F5-BA3C-1B942357E47F","versionEndIncluding":"15.1.0.1","versionStartIncluding":"15.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"DA369F2E-2E17-4BEA-B894-14656D977B93","versionEndIncluding":"14.1.2.3","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"282BF3D2-412B-4AE9-9850-05E30166F79F","versionEndIncluding":"15.0.1.2","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"EE3A9BD6-28AD-4F64-A5DE-789CECC2D54D","versionEndIncluding":"15.1.0.1","versionStartIncluding":"15.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"7E0B6F31-DC75-49C9-9E59-EF1CD68B1B3D","versionEndIncluding":"14.1.2.3","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"A94C3316-D767-40AD-A409-8669CD642645","versionEndIncluding":"15.0.1.2","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"17A718B2-8328-4625-AA4E-20F476561A69","versionEndIncluding":"15.1.0.1","versionStartIncluding":"15.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"8D806FBF-8E6D-412C-B547-92AD9294B639","versionEndIncluding":"14.1.2.3","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"AA7161A5-46AC-461C-A13B-628AEF2C444D","versionEndIncluding":"15.0.1.2","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"DE05D82A-81DF-4217-9064-05B4F4A7591E","versionEndIncluding":"15.1.0.1","versionStartIncluding":"15.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*","matchCriteriaId":"877B6375-3BC0-40C5-B13C-E435036D98CA","versionEndIncluding":"14.1.2.3","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*","matchCriteriaId":"79B77052-6472-48D0-BC2C-636160BA4F76","versionEndIncluding":"15.0.1.2","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*","matchCriteriaId":"F6DB9E0E-BC93-411A-82D0-3087137EA855","versionEndIncluding":"15.1.0.1","versionStartIncluding":"15.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"FFDA4E14-477A-4B0C-B603-7D53F13A387D","versionEndIncluding":"14.1.2.3","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"B0A9D902-8F96-40B5-8C34-989A3AE83FDA","versionEndIncluding":"15.0.1.2","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"0AE9AC4E-F3B4-4448-BAD1-465F51E21228","versionEndIncluding":"15.1.0.1","versionStartIncluding":"15.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"17DCA2C1-FD7A-430F-AD7C-4AB2DF7E233E","versionEndIncluding":"14.1.2.3","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"6E9D67E9-CF86-462F-86CF-315D53E98020","versionEndIncluding":"15.0.1.2","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"C423A3E8-7DD4-4971-91D0-E1B0985090AE","versionEndIncluding":"15.1.0.1","versionStartIncluding":"15.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"64B21CD4-4D50-45EC-8297-D54A1BBC6521","versionEndIncluding":"14.1.2.3","versionStartIncluding":"14.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"2FB0CE6E-CB81-468E-8B10-84A343CBE7D9","versionEndIncluding":"15.0.1.2","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"C1832096-DCEA-4F2D-91C1-C72B35A15700","versionEndIncluding":"15.1.0.1","versionStartIncluding":"15.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE) may expose a mechanism for remote attackers to access local daemons and bypass port lockdown settings."},{"lang":"es","value":"En las versiones 15.1.0 hasta 15.1.0.1, 15.0.0 hasta 15.0.1.2 y 14.1.0 hasta 14.1.2.3, BIG-IP Virtual Edition (VE) puede exponer un mecanismo para que los atacantes remotos accedan a demonios locales y omitan los ajustes del bloqueo del puerto."}],"id":"CVE-2020-5887","lastModified":"2026-06-17T03:22:23.953","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":6.4,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-04-30T21:15:17.307","references":[{"source":"f5sirt@f5.com","tags":["Vendor Advisory"],"url":"https://support.f5.com/csp/article/K10251014"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.f5.com/csp/article/K10251014"}],"sourceIdentifier":"f5sirt@f5.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-668"}],"source":"nvd@nist.gov","type":"Primary"}]}
|