PT-2020-18817 · F5 · Big-Ip Apm

Published 2020-08-26 · Updated 2020-09-02 · CVE-2020-5919

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions BIG-IP APM versions 15.1.0 through 15.1.0.4

Description The issue occurs when certain session variables are rendered by BIG-IP APM UI-based agents in an access profile configured with Modern customization, potentially causing the Traffic Management Microkernel (TMM) to stop responding.

Recommendations For versions 15.1.0 through 15.1.0.4, consider disabling the Modern customization in access profiles until a patch is available to prevent the TMM from stopping responding.

Fix

Related Identifiers

CVE-2020-5919

Affected Products

Big-Ip Apm

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-5919 · Security Note
• https://support.f5.com/csp/article/K94563369 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5919 · Vendor Advisory