CVE-2020-5943

In versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed through the REST interface, the protected fields are obfuscated in…

published November 5, 2020

CVSS
—
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

In versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed through the REST interface, the protected fields are obfuscated in the REST response, not protected via a SecureVault cryptogram as TMSH does. One example of protected fields is the GTM monitor password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00530 · 44.0th percentile
Published
2020-11-05T19:23Z
EPSS history
Timeline
  • 05 NOV 19:23Z
    In versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed through the REST interface, the protected fields are obfuscated in…
    cvelistv5