Vulnerability · Published Jul 1, 2020 · Assigned by f5
CVE-2020-5908
Medium 5.5
In plain English
A medium-severity security flaw in Edge Client for Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.3%top 71.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
In versions bundled with BIG-IP APM 12.1.0-12.1.5 and 11.6.1-11.6.5.2, Edge Client for Linux exposes full session ID in the local log files.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Edge Client for Linux | 12.1.0-12.1.5, 11.6.1-11.6.5.2 |
References
- https://support.f5.com/csp/article/K33023560 x_refsource_MISC
- VU#290915 third-party-advisory, x_refsource_CERT-VN