CVE-2020-5869

Published: Apr 24, 2020Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit.

Affected (3)

Products: F5: Big Iq Centralized Management

1 product

Big Iq Centralized Management

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
F5 Big Iq Centralized Management	From 5.2.0 to 5.4.0
F5 Big Iq Centralized Management	From 6.0.0 to 6.1.0
F5 Big Iq Centralized Management	From 7.0.0 to 7.1.0

Related CWEs

CWE-924

Improper Enforcement of Message Integrity During Transmission in a Communication Channel

The product establishes a communication channel with an endpoint and receives a message from that endpoint, but it does not sufficiently ensure that the message was not modified during transmission.

References (2)

https://support.f5.com/csp/article/K28855111

Source: f5sirt@f5.com

Vendor Advisory

https://support.f5.com/csp/article/K28855111

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.