Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-5887

No fix known EPSS 2%

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE) may expose a mechanism for remote attackers to access local daemons and bypass port lockdown settings.

Published 2020-04-30 · CVE record · OSV

Products: f5 big-ip_access_policy_manager, f5 big-ip_advanced_firewall_manager, f5 big-ip_analytics, f5 big-ip_application_acceleration_manager, f5 big-ip_application_security_manager, f5 big-ip_fraud_protection_service, f5 big-ip_link_controller, f5 big-ip_local_traffic_manager, f5 big-ip_policy_enforcement_manager, f5 big-ip_webaccelerator, f5 big-ip_edge_gateway, f5 big-ip_domain_name_system, f5 big-ip_global_traffic_manager