CVE-2020-5890

Summary

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a QKView, credentials for binding to LDAP servers used for remote authentication of the BIG-IP administrative interface will not fully obfuscate if they contain whitespace.

Affected Software

VendorProductVersion RangeStatus
n/aBIG-IP15.0.0-15.0.1affected
n/aBIG-IP14.1.0-14.1.2.3affected
n/aBIG-IP13.1.0-13.1.3.3affected
n/aBIG-IP12.1.0-12.1.5.1affected
n/aBIG-IQ5.2.0-7.1.0affected

Weaknesses

  • Information Disclosure

ADP Enrichment

CVE Program Container

Additional References

References