imPC@ndo IT

Tracker / CVE-2020-5934

CVE-2020-5934

Medium 6.5

On BIG-IP APM 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when multiple HTTP requests from the same client to configured SAML Single Logout (SLO) URL are passing through a TCP Keep-Alive connection, traffic to TMM can be disrupted.

Affected products and versions

f5 big-ip_access_policy_manager · 13.1.0 → 13.1.3.4
f5 big-ip_access_policy_manager · 14.1.0 → 14.1.2.4
f5 big-ip_access_policy_manager · 15.1.0 → 15.1.1

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References