CVE-2020-5944

Medium

Description

In BIG-IQ 7.1.0, accessing the DoS Summary events and DNS Overview pages in the BIG-IQ system interface returns an error message due to disabled Grafana reverse proxy in web service configuration. F5 has done further review of this vulnerability and has re-classified it as a defect. CVE-2020-5944 will continue to be referenced in F5 Security Advisory K57274211 and will not be assigned to other F5 vulnerabilities.

SeverityMedium
CVSS4.3
Exploit probability—
ProductF5 Big-iq Centralized Management
PublishedNov 5, 2020
First seenNov 5, 2020

How to fix

Update
  • f5 big-iq_centralized_management7.1.0.1 or later

Affected products

ProductAffected versionsFixed in
f5 big-iq_centralized_management7.1.0 ≤ v < 7.1.0.17.1.0.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.