CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-5916

In BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role and higher privileged roles can perform arbitrary file reads outside of the web root directory.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 40.7%

CVSS Severity

CVSS v3 Score 6.8

CVSS v2 Score 4.0

References

Products affected by CVE-2020-5916

F5 » Big-Ip Access Policy Manager » Version: 15.0.0

cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.0
F5 » Big-Ip Access Policy Manager » Version: 15.0.1

cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.1
F5 » Big-Ip Access Policy Manager » Version: 15.0.1.0.33.11

cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.1.0.33.11
F5 » Big-Ip Access Policy Manager » Version: 15.0.1.0.48.11

cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.1.0.48.11
F5 » Big-Ip Access Policy Manager » Version: 15.0.1.1

cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.1.1
F5 » Big-Ip Access Policy Manager » Version: 15.0.1.2

cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.1.2
F5 » Big-Ip Access Policy Manager » Version: 15.0.1.3

cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.1.3
F5 » Big-Ip Access Policy Manager » Version: 15.1.0

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.0
F5 » Big-Ip Access Policy Manager » Version: 15.1.0.1

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.0.1
F5 » Big-Ip Access Policy Manager » Version: 15.1.0.2

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.0.2
F5 » Big-Ip Access Policy Manager » Version: 15.1.0.3

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.0.3
F5 » Big-Ip Access Policy Manager » Version: 15.1.0.4

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.0.4
F5 » Big-Ip Advanced Firewall Manager » Version: 15.0.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.0
F5 » Big-Ip Advanced Firewall Manager » Version: 15.0.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.1
F5 » Big-Ip Advanced Firewall Manager » Version: 15.0.1.0.33.11

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.1.0.33.11
F5 » Big-Ip Advanced Firewall Manager » Version: 15.0.1.0.48.11

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.1.0.48.11
F5 » Big-Ip Advanced Firewall Manager » Version: 15.0.1.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.1.1
F5 » Big-Ip Advanced Firewall Manager » Version: 15.0.1.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.1.2
F5 » Big-Ip Advanced Firewall Manager » Version: 15.0.1.3

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.1.3
F5 » Big-Ip Advanced Firewall Manager » Version: 15.1.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.1.0
F5 » Big-Ip Advanced Firewall Manager » Version: 15.1.0.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.1.0.1
F5 » Big-Ip Advanced Firewall Manager » Version: 15.1.0.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.1.0.2
F5 » Big-Ip Advanced Firewall Manager » Version: 15.1.0.3

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.1.0.3
F5 » Big-Ip Advanced Firewall Manager » Version: 15.1.0.4

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.1.0.4
F5 » Big-Ip Analytics » Version: 15.0.0

cpe:2.3:a:f5:big-ip_analytics:15.0.0
F5 » Big-Ip Analytics » Version: 15.0.1

cpe:2.3:a:f5:big-ip_analytics:15.0.1
F5 » Big-Ip Analytics » Version: 15.0.1.0.33.11

cpe:2.3:a:f5:big-ip_analytics:15.0.1.0.33.11
F5 » Big-Ip Analytics » Version: 15.0.1.0.48.11

cpe:2.3:a:f5:big-ip_analytics:15.0.1.0.48.11
F5 » Big-Ip Analytics » Version: 15.0.1.1

cpe:2.3:a:f5:big-ip_analytics:15.0.1.1
F5 » Big-Ip Analytics » Version: 15.0.1.2

cpe:2.3:a:f5:big-ip_analytics:15.0.1.2
F5 » Big-Ip Analytics » Version: 15.0.1.3

cpe:2.3:a:f5:big-ip_analytics:15.0.1.3
F5 » Big-Ip Analytics » Version: 15.1.0

cpe:2.3:a:f5:big-ip_analytics:15.1.0
F5 » Big-Ip Analytics » Version: 15.1.0.1

cpe:2.3:a:f5:big-ip_analytics:15.1.0.1
F5 » Big-Ip Analytics » Version: 15.1.0.2

cpe:2.3:a:f5:big-ip_analytics:15.1.0.2
F5 » Big-Ip Analytics » Version: 15.1.0.3

cpe:2.3:a:f5:big-ip_analytics:15.1.0.3
F5 » Big-Ip Analytics » Version: 15.1.0.4

cpe:2.3:a:f5:big-ip_analytics:15.1.0.4
F5 » Big-Ip Application Acceleration Manager » Version: 15.0.0

cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.0
F5 » Big-Ip Application Acceleration Manager » Version: 15.0.1

cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.1
F5 » Big-Ip Application Acceleration Manager » Version: 15.0.1.0.33.11

cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.1.0.33.11
F5 » Big-Ip Application Acceleration Manager » Version: 15.0.1.0.48.11

cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.1.0.48.11
F5 » Big-Ip Application Acceleration Manager » Version: 15.0.1.1

cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.1.1
F5 » Big-Ip Application Acceleration Manager » Version: 15.0.1.2

cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.1.2
F5 » Big-Ip Application Acceleration Manager » Version: 15.0.1.3

cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.1.3
F5 » Big-Ip Application Acceleration Manager » Version: 15.1.0

cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.1.0
F5 » Big-Ip Application Acceleration Manager » Version: 15.1.0.1

cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.1.0.1
F5 » Big-Ip Application Acceleration Manager » Version: 15.1.0.2

cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.1.0.2
F5 » Big-Ip Application Acceleration Manager » Version: 15.1.0.3

cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.1.0.3
F5 » Big-Ip Application Acceleration Manager » Version: 15.1.0.4

cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.1.0.4
F5 » Big-Ip Application Security Manager » Version: 15.0.0

cpe:2.3:a:f5:big-ip_application_security_manager:15.0.0
F5 » Big-Ip Application Security Manager » Version: 15.0.1

cpe:2.3:a:f5:big-ip_application_security_manager:15.0.1
F5 » Big-Ip Application Security Manager » Version: 15.0.1.0.33.11

cpe:2.3:a:f5:big-ip_application_security_manager:15.0.1.0.33.11
F5 » Big-Ip Application Security Manager » Version: 15.0.1.0.48.11

cpe:2.3:a:f5:big-ip_application_security_manager:15.0.1.0.48.11
F5 » Big-Ip Application Security Manager » Version: 15.0.1.1

cpe:2.3:a:f5:big-ip_application_security_manager:15.0.1.1
F5 » Big-Ip Application Security Manager » Version: 15.0.1.2

cpe:2.3:a:f5:big-ip_application_security_manager:15.0.1.2
F5 » Big-Ip Application Security Manager » Version: 15.0.1.3

cpe:2.3:a:f5:big-ip_application_security_manager:15.0.1.3
F5 » Big-Ip Application Security Manager » Version: 15.1.0

cpe:2.3:a:f5:big-ip_application_security_manager:15.1.0
F5 » Big-Ip Application Security Manager » Version: 15.1.0.1

cpe:2.3:a:f5:big-ip_application_security_manager:15.1.0.1
F5 » Big-Ip Application Security Manager » Version: 15.1.0.2

cpe:2.3:a:f5:big-ip_application_security_manager:15.1.0.2
F5 » Big-Ip Application Security Manager » Version: 15.1.0.3

cpe:2.3:a:f5:big-ip_application_security_manager:15.1.0.3
F5 » Big-Ip Application Security Manager » Version: 15.1.0.4

cpe:2.3:a:f5:big-ip_application_security_manager:15.1.0.4
F5 » Big-Ip Ddos Hybrid Defender » Version: 15.0.0

cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:15.0.0
F5 » Big-Ip Ddos Hybrid Defender » Version: 15.0.1

cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:15.0.1
F5 » Big-Ip Ddos Hybrid Defender » Version: 15.1.0

cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:15.1.0
F5 » Big-Ip Ddos Hybrid Defender » Version: 15.1.0.2

cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:15.1.0.2
F5 » Big-Ip Ddos Hybrid Defender » Version: 15.1.0.4

cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:15.1.0.4
F5 » Big-Ip Domain Name System » Version: 15.0.0

cpe:2.3:a:f5:big-ip_domain_name_system:15.0.0
F5 » Big-Ip Domain Name System » Version: 15.0.1

cpe:2.3:a:f5:big-ip_domain_name_system:15.0.1
F5 » Big-Ip Domain Name System » Version: 15.0.1.0.33.11

cpe:2.3:a:f5:big-ip_domain_name_system:15.0.1.0.33.11
F5 » Big-Ip Domain Name System » Version: 15.0.1.0.48.11

cpe:2.3:a:f5:big-ip_domain_name_system:15.0.1.0.48.11
F5 » Big-Ip Domain Name System » Version: 15.0.1.1

cpe:2.3:a:f5:big-ip_domain_name_system:15.0.1.1
F5 » Big-Ip Domain Name System » Version: 15.0.1.2

cpe:2.3:a:f5:big-ip_domain_name_system:15.0.1.2
F5 » Big-Ip Domain Name System » Version: 15.0.1.3

cpe:2.3:a:f5:big-ip_domain_name_system:15.0.1.3
F5 » Big-Ip Domain Name System » Version: 15.1.0

cpe:2.3:a:f5:big-ip_domain_name_system:15.1.0
F5 » Big-Ip Domain Name System » Version: 15.1.0.1

cpe:2.3:a:f5:big-ip_domain_name_system:15.1.0.1
F5 » Big-Ip Domain Name System » Version: 15.1.0.2

cpe:2.3:a:f5:big-ip_domain_name_system:15.1.0.2
F5 » Big-Ip Domain Name System » Version: 15.1.0.3

cpe:2.3:a:f5:big-ip_domain_name_system:15.1.0.3
F5 » Big-Ip Domain Name System » Version: 15.1.0.4

cpe:2.3:a:f5:big-ip_domain_name_system:15.1.0.4
F5 » Big-Ip Fraud Protection Service » Version: 15.0.0

cpe:2.3:a:f5:big-ip_fraud_protection_service:15.0.0
F5 » Big-Ip Fraud Protection Service » Version: 15.0.1

cpe:2.3:a:f5:big-ip_fraud_protection_service:15.0.1
F5 » Big-Ip Fraud Protection Service » Version: 15.0.1.0.33.11

cpe:2.3:a:f5:big-ip_fraud_protection_service:15.0.1.0.33.11
F5 » Big-Ip Fraud Protection Service » Version: 15.0.1.0.48.11

cpe:2.3:a:f5:big-ip_fraud_protection_service:15.0.1.0.48.11
F5 » Big-Ip Fraud Protection Service » Version: 15.0.1.1

cpe:2.3:a:f5:big-ip_fraud_protection_service:15.0.1.1
F5 » Big-Ip Fraud Protection Service » Version: 15.0.1.2

cpe:2.3:a:f5:big-ip_fraud_protection_service:15.0.1.2
F5 » Big-Ip Fraud Protection Service » Version: 15.0.1.3

cpe:2.3:a:f5:big-ip_fraud_protection_service:15.0.1.3
F5 » Big-Ip Fraud Protection Service » Version: 15.1.0

cpe:2.3:a:f5:big-ip_fraud_protection_service:15.1.0
F5 » Big-Ip Fraud Protection Service » Version: 15.1.0.1

cpe:2.3:a:f5:big-ip_fraud_protection_service:15.1.0.1
F5 » Big-Ip Fraud Protection Service » Version: 15.1.0.2

cpe:2.3:a:f5:big-ip_fraud_protection_service:15.1.0.2
F5 » Big-Ip Fraud Protection Service » Version: 15.1.0.3

cpe:2.3:a:f5:big-ip_fraud_protection_service:15.1.0.3
F5 » Big-Ip Fraud Protection Service » Version: 15.1.0.4

cpe:2.3:a:f5:big-ip_fraud_protection_service:15.1.0.4
F5 » Big-Ip Global Traffic Manager » Version: 15.0.0

cpe:2.3:a:f5:big-ip_global_traffic_manager:15.0.0
F5 » Big-Ip Global Traffic Manager » Version: 15.0.1

cpe:2.3:a:f5:big-ip_global_traffic_manager:15.0.1
F5 » Big-Ip Global Traffic Manager » Version: 15.0.1.0.33.11

cpe:2.3:a:f5:big-ip_global_traffic_manager:15.0.1.0.33.11
F5 » Big-Ip Global Traffic Manager » Version: 15.0.1.0.48.11

cpe:2.3:a:f5:big-ip_global_traffic_manager:15.0.1.0.48.11
F5 » Big-Ip Global Traffic Manager » Version: 15.0.1.1

cpe:2.3:a:f5:big-ip_global_traffic_manager:15.0.1.1
F5 » Big-Ip Global Traffic Manager » Version: 15.0.1.2

cpe:2.3:a:f5:big-ip_global_traffic_manager:15.0.1.2
F5 » Big-Ip Global Traffic Manager » Version: 15.0.1.3

cpe:2.3:a:f5:big-ip_global_traffic_manager:15.0.1.3
F5 » Big-Ip Global Traffic Manager » Version: 15.1.0

cpe:2.3:a:f5:big-ip_global_traffic_manager:15.1.0
F5 » Big-Ip Global Traffic Manager » Version: 15.1.0.1

cpe:2.3:a:f5:big-ip_global_traffic_manager:15.1.0.1
F5 » Big-Ip Global Traffic Manager » Version: 15.1.0.2

cpe:2.3:a:f5:big-ip_global_traffic_manager:15.1.0.2
F5 » Big-Ip Global Traffic Manager » Version: 15.1.0.3

cpe:2.3:a:f5:big-ip_global_traffic_manager:15.1.0.3
F5 » Big-Ip Global Traffic Manager » Version: 15.1.0.4

cpe:2.3:a:f5:big-ip_global_traffic_manager:15.1.0.4
F5 » Big-Ip Link Controller » Version: 15.0.0

cpe:2.3:a:f5:big-ip_link_controller:15.0.0
F5 » Big-Ip Link Controller » Version: 15.0.1

cpe:2.3:a:f5:big-ip_link_controller:15.0.1
F5 » Big-Ip Link Controller » Version: 15.0.1.0.33.11

cpe:2.3:a:f5:big-ip_link_controller:15.0.1.0.33.11
F5 » Big-Ip Link Controller » Version: 15.0.1.0.48.11

cpe:2.3:a:f5:big-ip_link_controller:15.0.1.0.48.11
F5 » Big-Ip Link Controller » Version: 15.0.1.1

cpe:2.3:a:f5:big-ip_link_controller:15.0.1.1
F5 » Big-Ip Link Controller » Version: 15.0.1.2

cpe:2.3:a:f5:big-ip_link_controller:15.0.1.2
F5 » Big-Ip Link Controller » Version: 15.0.1.3

cpe:2.3:a:f5:big-ip_link_controller:15.0.1.3
F5 » Big-Ip Link Controller » Version: 15.1.0

cpe:2.3:a:f5:big-ip_link_controller:15.1.0
F5 » Big-Ip Link Controller » Version: 15.1.0.1

cpe:2.3:a:f5:big-ip_link_controller:15.1.0.1
F5 » Big-Ip Link Controller » Version: 15.1.0.2

cpe:2.3:a:f5:big-ip_link_controller:15.1.0.2
F5 » Big-Ip Link Controller » Version: 15.1.0.3

cpe:2.3:a:f5:big-ip_link_controller:15.1.0.3
F5 » Big-Ip Link Controller » Version: 15.1.0.4

cpe:2.3:a:f5:big-ip_link_controller:15.1.0.4
F5 » Big-Ip Local Traffic Manager » Version: 15.0.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.0
F5 » Big-Ip Local Traffic Manager » Version: 15.0.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.1
F5 » Big-Ip Local Traffic Manager » Version: 15.0.1.0.33.11

cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.1.0.33.11
F5 » Big-Ip Local Traffic Manager » Version: 15.0.1.0.48.11

cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.1.0.48.11
F5 » Big-Ip Local Traffic Manager » Version: 15.0.1.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.1.1
F5 » Big-Ip Local Traffic Manager » Version: 15.0.1.2

cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.1.2
F5 » Big-Ip Local Traffic Manager » Version: 15.0.1.3

cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.1.3
F5 » Big-Ip Local Traffic Manager » Version: 15.1.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:15.1.0
F5 » Big-Ip Local Traffic Manager » Version: 15.1.0.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:15.1.0.1
F5 » Big-Ip Local Traffic Manager » Version: 15.1.0.2

cpe:2.3:a:f5:big-ip_local_traffic_manager:15.1.0.2
F5 » Big-Ip Local Traffic Manager » Version: 15.1.0.3

cpe:2.3:a:f5:big-ip_local_traffic_manager:15.1.0.3
F5 » Big-Ip Local Traffic Manager » Version: 15.1.0.4

cpe:2.3:a:f5:big-ip_local_traffic_manager:15.1.0.4
F5 » Big-Ip Policy Enforcement Manager » Version: 15.0.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.0
F5 » Big-Ip Policy Enforcement Manager » Version: 15.0.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.1
F5 » Big-Ip Policy Enforcement Manager » Version: 15.0.1.0.33.11

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.1.0.33.11
F5 » Big-Ip Policy Enforcement Manager » Version: 15.0.1.0.48.11

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.1.0.48.11
F5 » Big-Ip Policy Enforcement Manager » Version: 15.0.1.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.1.1
F5 » Big-Ip Policy Enforcement Manager » Version: 15.0.1.2

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.1.2
F5 » Big-Ip Policy Enforcement Manager » Version: 15.0.1.3

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.1.3
F5 » Big-Ip Policy Enforcement Manager » Version: 15.1.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.1.0
F5 » Big-Ip Policy Enforcement Manager » Version: 15.1.0.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.1.0.1
F5 » Big-Ip Policy Enforcement Manager » Version: 15.1.0.2

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.1.0.2
F5 » Big-Ip Policy Enforcement Manager » Version: 15.1.0.3

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.1.0.3
F5 » Big-Ip Policy Enforcement Manager » Version: 15.1.0.4

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.1.0.4
F5 » Ssl Orchestrator » Version: 15.0.0

cpe:2.3:a:f5:ssl_orchestrator:15.0.0
F5 » Ssl Orchestrator » Version: 15.0.1

cpe:2.3:a:f5:ssl_orchestrator:15.0.1
F5 » Ssl Orchestrator » Version: 15.1.0

cpe:2.3:a:f5:ssl_orchestrator:15.1.0
F5 » Ssl Orchestrator » Version: 15.1.0.2

cpe:2.3:a:f5:ssl_orchestrator:15.1.0.2
F5 » Ssl Orchestrator » Version: 15.1.0.4

cpe:2.3:a:f5:ssl_orchestrator:15.1.0.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-5916

Products

Pricing

Contact Us