CVE Vulnerabilities

CVE-2020-5912

Published: Aug 26, 2020 | Modified: Nov 21, 2024
CVSS 3.x
7.1
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 2.x
3.6 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the restjavad processs dump command does not follow current best coding practices and may overwrite arbitrary files.

Affected Software

NameVendorStart VersionEnd Version
Big-ip_access_policy_managerF511.6.1 (including)11.6.5.2 (excluding)
Big-ip_access_policy_managerF512.1.0 (including)12.1.5.2 (excluding)
Big-ip_access_policy_managerF513.1.0 (including)13.1.3.4 (excluding)
Big-ip_access_policy_managerF514.1.0 (including)14.1.2.5 (excluding)
Big-ip_access_policy_managerF515.0.0 (including)15.0.1.4 (excluding)
Big-ip_access_policy_managerF515.1.0 (including)15.1.0.5 (excluding)
Big-ip_advanced_firewall_managerF511.6.1 (including)11.6.5.2 (excluding)
Big-ip_advanced_firewall_managerF512.1.0 (including)12.1.5.2 (excluding)
Big-ip_advanced_firewall_managerF513.1.0 (including)13.1.3.4 (excluding)
Big-ip_advanced_firewall_managerF514.1.0 (including)14.1.2.5 (excluding)
Big-ip_advanced_firewall_managerF515.0.0 (including)15.0.1.4 (excluding)
Big-ip_advanced_firewall_managerF515.1.0 (including)15.1.0.5 (excluding)
Big-ip_advanced_web_application_firewallF511.6.1 (including)11.6.5.2 (excluding)
Big-ip_advanced_web_application_firewallF512.1.0 (including)12.1.5.2 (excluding)
Big-ip_advanced_web_application_firewallF513.1.0 (including)13.1.3.4 (excluding)
Big-ip_advanced_web_application_firewallF514.1.0 (including)14.1.2.5 (excluding)
Big-ip_advanced_web_application_firewallF515.0.0 (including)15.0.1.4 (excluding)
Big-ip_advanced_web_application_firewallF515.1.0 (including)15.1.0.5 (excluding)
Big-ip_analyticsF511.6.1 (including)11.6.5.2 (excluding)
Big-ip_analyticsF512.1.0 (including)12.1.5.2 (excluding)
Big-ip_analyticsF513.1.0 (including)13.1.3.4 (excluding)
Big-ip_analyticsF514.1.0 (including)14.1.2.5 (excluding)
Big-ip_analyticsF515.0.0 (including)15.0.1.4 (excluding)
Big-ip_analyticsF515.1.0 (including)15.1.0.5 (excluding)
Big-ip_application_acceleration_managerF511.6.1 (including)11.6.5.2 (excluding)
Big-ip_application_acceleration_managerF512.1.0 (including)12.1.5.2 (excluding)
Big-ip_application_acceleration_managerF513.1.0 (including)13.1.3.4 (excluding)
Big-ip_application_acceleration_managerF514.1.0 (including)14.1.2.5 (excluding)
Big-ip_application_acceleration_managerF515.0.0 (including)15.0.1.4 (excluding)
Big-ip_application_acceleration_managerF515.1.0 (including)15.1.0.5 (excluding)
Big-ip_application_security_managerF511.6.1 (including)11.6.5.2 (excluding)
Big-ip_application_security_managerF512.1.0 (including)12.1.5.2 (excluding)
Big-ip_application_security_managerF513.1.0 (including)13.1.3.4 (excluding)
Big-ip_application_security_managerF514.1.0 (including)14.1.2.5 (excluding)
Big-ip_application_security_managerF515.0.0 (including)15.0.1.4 (excluding)
Big-ip_application_security_managerF515.1.0 (including)15.1.0.5 (excluding)
Big-ip_ddos_hybrid_defenderF511.6.1 (including)11.6.5.2 (excluding)
Big-ip_ddos_hybrid_defenderF512.1.0 (including)12.1.5.2 (excluding)
Big-ip_ddos_hybrid_defenderF513.1.0 (including)13.1.3.4 (excluding)
Big-ip_ddos_hybrid_defenderF514.1.0 (including)14.1.2.5 (excluding)
Big-ip_ddos_hybrid_defenderF515.0.0 (including)15.0.1.4 (excluding)
Big-ip_ddos_hybrid_defenderF515.1.0 (including)15.1.0.5 (excluding)
Big-ip_domain_name_systemF511.6.1 (including)11.6.5.2 (excluding)
Big-ip_domain_name_systemF512.1.0 (including)12.1.5.2 (excluding)
Big-ip_domain_name_systemF513.1.0 (including)13.1.3.4 (excluding)
Big-ip_domain_name_systemF514.1.0 (including)14.1.2.5 (excluding)
Big-ip_domain_name_systemF515.0.0 (including)15.0.1.4 (excluding)
Big-ip_domain_name_systemF515.1.0 (including)15.1.0.5 (excluding)
Big-ip_fraud_protection_serviceF511.6.1 (including)11.6.5.2 (excluding)
Big-ip_fraud_protection_serviceF512.1.0 (including)12.1.5.2 (excluding)
Big-ip_fraud_protection_serviceF513.1.0 (including)13.1.3.4 (excluding)
Big-ip_fraud_protection_serviceF514.1.0 (including)14.1.2.5 (excluding)
Big-ip_fraud_protection_serviceF515.0.0 (including)15.0.1.4 (excluding)
Big-ip_fraud_protection_serviceF515.1.0 (including)15.1.0.5 (excluding)
Big-ip_global_traffic_managerF511.6.1 (including)11.6.5.2 (excluding)
Big-ip_global_traffic_managerF512.1.0 (including)12.1.5.2 (excluding)
Big-ip_global_traffic_managerF513.1.0 (including)13.1.3.4 (excluding)
Big-ip_global_traffic_managerF514.1.0 (including)14.1.2.5 (excluding)
Big-ip_global_traffic_managerF515.0.0 (including)15.0.1.4 (excluding)
Big-ip_global_traffic_managerF515.1.0 (including)15.1.0.5 (excluding)
Big-ip_link_controllerF511.6.1 (including)11.6.5.2 (excluding)
Big-ip_link_controllerF512.1.0 (including)12.1.5.2 (excluding)
Big-ip_link_controllerF513.1.0 (including)13.1.3.4 (excluding)
Big-ip_link_controllerF514.1.0 (including)14.1.2.5 (excluding)
Big-ip_link_controllerF515.0.0 (including)15.0.1.4 (excluding)
Big-ip_link_controllerF515.1.0 (including)15.1.0.5 (excluding)
Big-ip_local_traffic_managerF511.6.1 (including)11.6.5.2 (excluding)
Big-ip_local_traffic_managerF512.1.0 (including)12.1.5.2 (excluding)
Big-ip_local_traffic_managerF513.1.0 (including)13.1.3.4 (excluding)
Big-ip_local_traffic_managerF514.1.0 (including)14.1.2.5 (excluding)
Big-ip_local_traffic_managerF515.0.0 (including)15.0.1.4 (excluding)
Big-ip_local_traffic_managerF515.1.0 (including)15.1.0.5 (excluding)
Big-ip_policy_enforcement_managerF511.6.1 (including)11.6.5.2 (excluding)
Big-ip_policy_enforcement_managerF512.1.0 (including)12.1.5.2 (excluding)
Big-ip_policy_enforcement_managerF513.1.0 (including)13.1.3.4 (excluding)
Big-ip_policy_enforcement_managerF514.1.0 (including)14.1.2.5 (excluding)
Big-ip_policy_enforcement_managerF515.0.0 (including)15.0.1.4 (excluding)
Big-ip_policy_enforcement_managerF515.1.0 (including)15.1.0.5 (excluding)
Ssl_orchestratorF511.6.1 (including)11.6.5.2 (excluding)
Ssl_orchestratorF512.1.0 (including)12.1.5.2 (excluding)
Ssl_orchestratorF513.1.0 (including)13.1.3.4 (excluding)
Ssl_orchestratorF514.1.0 (including)14.1.2.5 (excluding)
Ssl_orchestratorF515.0.0 (including)15.0.1.4 (excluding)
Ssl_orchestratorF515.1.0 (including)15.1.0.5 (excluding)

References