2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2020-5903" ,
"sourceIdentifier" : "f5sirt@f5.com" ,
"published" : "2020-07-01T15:15:15.437" ,
2024-11-23 13:10:58 +00:00
"lastModified" : "2024-11-21T05:34:47.873" ,
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, a Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility."
} ,
{
"lang" : "es" ,
"value" : "En BIG-IP versiones 15.0.0 hasta 15.1.0.3, 14.1.0 hasta 14.1.2.5, 13.1.0 hasta 13.1.3.3, 12.1.0 hasta 12.1.5.1, presenta una vulnerabilidad de tipo Cross-Site Scripting (XSS) en una p\u00e1gina no revelada de la utilidad de Configuraci\u00f3n BIG-IP"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" ,
2024-11-23 13:10:58 +00:00
"baseScore" : 6.1 ,
"baseSeverity" : "MEDIUM" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "LOW" ,
2024-11-23 13:10:58 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 2.7
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N" ,
2024-11-23 13:10:58 +00:00
"baseScore" : 4.3 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "PARTIAL" ,
2024-11-23 13:10:58 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.6 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : true
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-79"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "12.1.0" ,
"versionEndIncluding" : "12.1.5" ,
"matchCriteriaId" : "6C3B5688-0235-4D4F-A26C-440FF24A1B43"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.1.0" ,
"versionEndIncluding" : "13.1.3" ,
"matchCriteriaId" : "6FCB6C17-33AC-4E5E-8633-7490058CA51F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "14.1.0" ,
"versionEndIncluding" : "14.1.2" ,
"matchCriteriaId" : "C8D4FBBA-1D87-4CCB-ADB3-42514FB0CF45"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.0.0" ,
"versionEndIncluding" : "15.1.0" ,
"matchCriteriaId" : "EFBB9E7C-08D1-4B30-AD3B-CADBF30D756B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "12.1.0" ,
"versionEndIncluding" : "12.1.5" ,
"matchCriteriaId" : "151ED6D1-AA85-4213-8F3A-8167CBEC4721"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.1.0" ,
"versionEndIncluding" : "13.1.3" ,
"matchCriteriaId" : "6F1C68BC-A3EF-4205-AD00-68CB3A8C65AF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "14.1.0" ,
"versionEndIncluding" : "14.1.2" ,
"matchCriteriaId" : "D8BBC028-03DD-4412-9180-883E4252E132"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.0.0" ,
"versionEndIncluding" : "15.1.0" ,
"matchCriteriaId" : "830028B5-9BAF-439C-8166-1053C0CB9836"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "12.1.0" ,
"versionEndIncluding" : "12.1.5" ,
"matchCriteriaId" : "5D5AA99B-08E7-4959-A3B4-41AA527B4B22"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.1.0" ,
"versionEndIncluding" : "13.1.3" ,
"matchCriteriaId" : "4AC8FD5C-AE1A-4484-BB6F-EBB6A48D21F8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "14.1.0" ,
"versionEndIncluding" : "14.1.2" ,
"matchCriteriaId" : "EC15881B-9C49-4E77-9FB6-A6E60D0BCAD3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.0.0" ,
"versionEndIncluding" : "15.1.0" ,
"matchCriteriaId" : "01BC2A57-030F-4A13-B584-BE2627EA3FE7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "12.1.0" ,
"versionEndIncluding" : "12.1.5" ,
"matchCriteriaId" : "9DC86A5F-C793-4848-901F-04BFB57A07F6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.1.0" ,
"versionEndIncluding" : "13.1.3" ,
"matchCriteriaId" : "0772A366-87B9-40EC-9F63-AE0FF0EF5002"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "14.1.0" ,
"versionEndIncluding" : "14.1.2" ,
"matchCriteriaId" : "3D4B5A46-AA7B-416F-BA97-76A0BA232C6F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.0.0" ,
"versionEndIncluding" : "15.1.0" ,
"matchCriteriaId" : "FD91F1A1-67F5-4547-848B-21664A9CC685"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "12.1.0" ,
"versionEndIncluding" : "12.1.5" ,
"matchCriteriaId" : "2E5552A3-91CD-4B97-AD33-4F1FB4C8827A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.1.0" ,
"versionEndIncluding" : "13.1.3" ,
"matchCriteriaId" : "8A53C692-D353-42E3-9148-F850DA11884F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "14.1.0" ,
"versionEndIncluding" : "14.1.2" ,
"matchCriteriaId" : "05106312-E60D-4CF1-B4C8-6F1EF5AF8D75"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.0.0" ,
"versionEndIncluding" : "15.1.0" ,
"matchCriteriaId" : "10367A28-787A-4FAB-80AD-ADD67A751732"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "12.1.0" ,
"versionEndIncluding" : "12.1.5" ,
"matchCriteriaId" : "55C2EC23-E78F-4447-BACF-21FC36ABF155"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.1.0" ,
"versionEndIncluding" : "13.1.3" ,
"matchCriteriaId" : "A35AC237-573B-4309-87EF-3945FA2449BF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "14.1.0" ,
"versionEndIncluding" : "14.1.2" ,
"matchCriteriaId" : "27ABD6A3-5D67-4543-BB90-602F17A98B52"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.0.0" ,
"versionEndIncluding" : "15.1.0" ,
"matchCriteriaId" : "21E18EA5-2210-41B1-87B0-55AB16514FE2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "12.1.0" ,
"versionEndIncluding" : "12.1.5" ,
"matchCriteriaId" : "945A19E8-51EB-42FE-9BF1-12DAC78B5286"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.1.0" ,
"versionEndIncluding" : "13.1.3" ,
"matchCriteriaId" : "0B6C3F50-BD60-4A8C-8DBB-680DA4D6BE6D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "14.1.0" ,
"versionEndIncluding" : "14.1.2" ,
"matchCriteriaId" : "B1B2D963-4E55-45B5-80E0-BC6FFB2122F7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.0.0" ,
"versionEndIncluding" : "15.1.0" ,
"matchCriteriaId" : "317C50A2-FE92-4C78-A94A-062274E6A6A8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "12.1.0" ,
"versionEndIncluding" : "12.1.5" ,
"matchCriteriaId" : "EB5007D0-BBDB-4D74-9C88-98FBA74757D1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.1.0" ,
"versionEndIncluding" : "13.1.3" ,
"matchCriteriaId" : "FB07E847-6083-4CC8-8A62-6B9744B87088"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "14.1.0" ,
"versionEndIncluding" : "14.1.2" ,
"matchCriteriaId" : "D8BBD637-148A-4E1A-B2DC-129BCD121C1E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.0.0" ,
"versionEndIncluding" : "15.1.0" ,
"matchCriteriaId" : "D748001D-340C-45C4-A2D0-0575538C5CEC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "12.1.0" ,
"versionEndIncluding" : "12.1.5" ,
"matchCriteriaId" : "B7725810-66D2-4460-A174-9F3BFAD966F2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.1.0" ,
"versionEndIncluding" : "13.1.3" ,
"matchCriteriaId" : "0620AA57-83D1-41E6-8ABB-99F3FABB10F0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "14.1.0" ,
"versionEndIncluding" : "14.1.2" ,
"matchCriteriaId" : "A93AAEB9-556E-4F94-ADEC-D9C294B7F37E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.0.0" ,
"versionEndIncluding" : "15.1.0" ,
"matchCriteriaId" : "0371EB7C-3D41-4B8C-8FA9-DC6F42442448"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "12.1.0" ,
"versionEndIncluding" : "12.1.5" ,
"matchCriteriaId" : "EFD760FE-4347-4D36-B5C6-4009398060F2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.1.0" ,
"versionEndIncluding" : "13.1.3" ,
"matchCriteriaId" : "BF552D91-612A-43E1-B2D6-02E2515FEA22"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "14.1.0" ,
"versionEndIncluding" : "14.1.2" ,
"matchCriteriaId" : "7C8D0EF7-9C65-4491-B358-DB1AAB0EA1FF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.0.0" ,
"versionEndIncluding" : "15.1.0" ,
"matchCriteriaId" : "9C1BC0A8-5868-4FCA-80A5-661C3870EB7D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "12.1.0" ,
"versionEndIncluding" : "12.1.5" ,
"matchCriteriaId" : "65B76F53-7D8B-477E-8B6E-91AC0A9009FF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.1.0" ,
"versionEndIncluding" : "13.1.3" ,
"matchCriteriaId" : "6704F0A6-16E2-4C2D-B5BD-EDDEAD5C153C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "14.1.0" ,
"versionEndIncluding" : "14.1.2" ,
"matchCriteriaId" : "79B0C4C9-FCA9-4108-B349-2EFBB4A1153B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.0.0" ,
"versionEndIncluding" : "15.1.0" ,
"matchCriteriaId" : "0585424E-3F74-400E-8199-ED964317F89F"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://support.f5.com/csp/article/K43638305" ,
"source" : "f5sirt@f5.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "https://www.kb.cert.org/vuls/id/290915" ,
"source" : "f5sirt@f5.com" ,
"tags" : [
"Third Party Advisory" ,
"US Government Resource"
]
2024-11-23 13:10:58 +00:00
} ,
{
"url" : "https://support.f5.com/csp/article/K43638305" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "https://www.kb.cert.org/vuls/id/290915" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Third Party Advisory" ,
"US Government Resource"
]
2023-04-24 12:24:31 +02:00
}
]
}