UpHeron
All vulnerabilities

Servers and applications

CVE-2020-5860

On BIG-IP 15.0.0-15.1.0.2, 14.1.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5.1, and 11.5.2-11.6.5.1 and BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, in a High Availability (HA) network failover in Device Service Cluster (DSC), the failover service does not require a strong form of authentication and HA network failover traffic is not encrypted by Transport Layer Security (TLS).

Severity
High 8.1
Published
27 Mar 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • From 11.5.2 up to 11.6.5
  • From 12.1.0 up to 12.1.5
  • From 13.1.0 up to 13.1.3
  • From 14.1.0 up to 14.1.2
  • From 15.0.0 up to 15.1.0
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_local_traffic_manager
  • From 11.5.2 up to 11.6.5
  • From 12.1.0 up to 12.1.5
  • From 13.1.0 up to 13.1.3
  • From 14.1.0 up to 14.1.2
  • From 15.0.0 up to 15.1.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-5860
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-5860