HTTP: F5 BIG-IP Multiple Products Configuration Utility Directory Traversal
This signature detects attempts to exploit a known vulnerability against F5 BIG-IP products. A successful attack can lead to directory traversal and arbitrary code execution.
Extended Description
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.
Affected Products
F5 big-ip_access_policy_manager
Short Name
HTTP:DIR:F5-BIGIP-DIR-TRAVERSAL
Severity
Critical
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
BIG-IP CVE-2020-5902 Configuration Directory F5 Multiple Products Traversal Utility
Release Date
08/06/2020
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3590
False Positive
Unknown
Vendors
F5
CVSS Score
10.0