Vulnerability Details CVE-2016-5020
F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Resource Administration role and gain privilege via a crafted external Extended Application Verification (EAV) monitor script.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 81.7%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
Products affected by CVE-2016-5020
-
cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.1
-
cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.2
-
cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.3
-
cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.4
-
cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1
-
cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0
-
cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1
-
cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0
-
cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1
-
cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2
-
cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3
-
cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4
-
cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0
-
cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1
-
cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0
-
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.0
-
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.1
-
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0
-
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1
-
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2
-
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3
-
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4
-
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0
-
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1
-
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0
-
cpe:2.3:a:f5:big-ip_analytics:11.2.1
-
cpe:2.3:a:f5:big-ip_analytics:11.4.0
-
cpe:2.3:a:f5:big-ip_analytics:11.4.1
-
cpe:2.3:a:f5:big-ip_analytics:11.5.0
-
cpe:2.3:a:f5:big-ip_analytics:11.5.1
-
cpe:2.3:a:f5:big-ip_analytics:11.5.2
-
cpe:2.3:a:f5:big-ip_analytics:11.5.3
-
cpe:2.3:a:f5:big-ip_analytics:11.5.4
-
cpe:2.3:a:f5:big-ip_analytics:11.6.0
-
cpe:2.3:a:f5:big-ip_analytics:11.6.1
-
cpe:2.3:a:f5:big-ip_analytics:12.0.0
-
cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.0
-
cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1
-
cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0
-
cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1
-
cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2
-
cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3
-
cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4
-
cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0
-
cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1
-
cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0
-
cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0
-
cpe:2.3:a:f5:big-ip_application_security_manager:10.2.1
-
cpe:2.3:a:f5:big-ip_application_security_manager:10.2.2
-
cpe:2.3:a:f5:big-ip_application_security_manager:10.2.3
-
cpe:2.3:a:f5:big-ip_application_security_manager:10.2.4
-
cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1
-
cpe:2.3:a:f5:big-ip_application_security_manager:11.4.0
-
cpe:2.3:a:f5:big-ip_application_security_manager:11.4.1
-
cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0
-
cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1
-
cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2
-
cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3
-
cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4
-
cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0
-
cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1
-
cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0
-
cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0
-
cpe:2.3:a:f5:big-ip_edge_gateway:10.2.1
-
cpe:2.3:a:f5:big-ip_edge_gateway:10.2.2
-
cpe:2.3:a:f5:big-ip_edge_gateway:10.2.3
-
cpe:2.3:a:f5:big-ip_edge_gateway:10.2.4
-
cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:10.2.1
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:10.2.2
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:10.2.3
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:10.2.4
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.1
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.0
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.1
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0
-
cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.1
-
cpe:2.3:a:f5:big-ip_link_controller:10.2.1
-
cpe:2.3:a:f5:big-ip_link_controller:10.2.2
-
cpe:2.3:a:f5:big-ip_link_controller:10.2.3
-
cpe:2.3:a:f5:big-ip_link_controller:10.2.4
-
cpe:2.3:a:f5:big-ip_link_controller:11.2.1
-
cpe:2.3:a:f5:big-ip_link_controller:11.4.0
-
cpe:2.3:a:f5:big-ip_link_controller:11.4.1
-
cpe:2.3:a:f5:big-ip_link_controller:11.5.0
-
cpe:2.3:a:f5:big-ip_link_controller:11.5.1
-
cpe:2.3:a:f5:big-ip_link_controller:11.5.2
-
cpe:2.3:a:f5:big-ip_link_controller:11.5.3
-
cpe:2.3:a:f5:big-ip_link_controller:11.5.4
-
cpe:2.3:a:f5:big-ip_link_controller:11.6.0
-
cpe:2.3:a:f5:big-ip_link_controller:11.6.1
-
cpe:2.3:a:f5:big-ip_link_controller:12.0.0
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.1
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.2
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.3
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.4
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.0
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.1
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1
-
cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0
-
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.0
-
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1
-
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0
-
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1
-
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2
-
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3
-
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4
-
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0
-
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1
-
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0
-
cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.1
-
cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.2
-
cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.3
-
cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.4
-
cpe:2.3:a:f5:big-ip_protocol_security_module:11.3.0
-
cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.0
-
cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.1
-
cpe:2.3:a:f5:big-ip_wan_optimization_manager:10.2.1
-
cpe:2.3:a:f5:big-ip_wan_optimization_manager:10.2.2
-
cpe:2.3:a:f5:big-ip_wan_optimization_manager:10.2.3
-
cpe:2.3:a:f5:big-ip_wan_optimization_manager:10.2.4
-
cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.2.1
-
cpe:2.3:a:f5:big-ip_webaccelerator:10.2.1
-
cpe:2.3:a:f5:big-ip_webaccelerator:10.2.2
-
cpe:2.3:a:f5:big-ip_webaccelerator:10.2.3
-
cpe:2.3:a:f5:big-ip_webaccelerator:10.2.4
-
cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1