Tracker / CVE-2020-5950
CVE-2020-5950
Medium 5.3
On BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP system if the victim user is granted the admin role.
Affected products and versions
| f5 | big-ip_advanced_firewall_manager · 14.1.0 → 14.1.2.7 |
|---|
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.