Vulnerabilities > CVE-2020-5897 - Use After Free vulnerability in F5 Big-Ip Access Policy Manager

CVSS 6.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

CWE-416

NVD

Published: 2020-05-12

Updated: 2020-05-14

Summary

In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component.

Vulnerable Configurations

Part	Description	Count
Application	F5 F5 BIG IP Access Policy Manager 11.6.1 F5 BIG IP Access Policy Manager 11.6.2 F5 BIG IP Access Policy Manager 11.6.3 F5 BIG IP Access Policy Manager 11.6.3.1 F5 BIG IP Access Policy Manager 11.6.3.2 F5 BIG IP Access Policy Manager 11.6.3.3 F5 BIG IP Access Policy Manager 11.6.3.4 F5 BIG IP Access Policy Manager 11.6.4 F5 BIG IP Access Policy Manager 11.6.5 F5 BIG IP Access Policy Manager 11.6.5.1 F5 BIG IP Access Policy Manager 12.1.0 F5 BIG IP Access Policy Manager 12.1.1 F5 BIG IP Access Policy Manager 12.1.2 F5 BIG IP Access Policy Manager 12.1.3 F5 BIG IP Access Policy Manager 12.1.3.1 F5 BIG IP Access Policy Manager 12.1.3.2 F5 BIG IP Access Policy Manager 12.1.3.3 F5 BIG IP Access Policy Manager 12.1.3.4 F5 BIG IP Access Policy Manager 12.1.3.5 F5 BIG IP Access Policy Manager 12.1.3.6 F5 BIG IP Access Policy Manager 12.1.3.7 F5 BIG IP Access Policy Manager 12.1.4 F5 BIG IP Access Policy Manager 12.1.4.1 F5 BIG IP Access Policy Manager 12.1.4.2 F5 BIG IP Access Policy Manager 12.1.5 F5 BIG IP Access Policy Manager 12.1.5.1 F5 BIG IP Access Policy Manager 13.1.0 F5 BIG IP Access Policy Manager 13.1.0.1 F5 BIG IP Access Policy Manager 13.1.0.2 F5 BIG IP Access Policy Manager 13.1.0.3 F5 BIG IP Access Policy Manager 13.1.0.4 F5 BIG IP Access Policy Manager 13.1.0.5 F5 BIG IP Access Policy Manager 13.1.0.6 F5 BIG IP Access Policy Manager 13.1.0.7 F5 BIG IP Access Policy Manager 13.1.0.8 F5 BIG IP Access Policy Manager 13.1.1 F5 BIG IP Access Policy Manager 13.1.1.1 F5 BIG IP Access Policy Manager 13.1.1.2 F5 BIG IP Access Policy Manager 13.1.1.3 F5 BIG IP Access Policy Manager 13.1.1.4 F5 BIG IP Access Policy Manager 13.1.1.5 F5 BIG IP Access Policy Manager 13.1.2 F5 BIG IP Access Policy Manager 13.1.3 F5 BIG IP Access Policy Manager 13.1.3.1 F5 BIG IP Access Policy Manager 13.1.3.2 F5 BIG IP Access Policy Manager 13.1.3.3 F5 BIG IP Access Policy Manager 14.1.0 F5 BIG IP Access Policy Manager 14.1.0.1 F5 BIG IP Access Policy Manager 14.1.0.2 F5 BIG IP Access Policy Manager 14.1.0.3 F5 BIG IP Access Policy Manager 14.1.0.3.0.79.6 F5 BIG IP Access Policy Manager 14.1.0.3.0.97.6 F5 BIG IP Access Policy Manager 14.1.0.3.0.99.6 F5 BIG IP Access Policy Manager 14.1.0.5 F5 BIG IP Access Policy Manager 14.1.0.5.0.15.5 F5 BIG IP Access Policy Manager 14.1.0.5.0.36.5 F5 BIG IP Access Policy Manager 14.1.0.5.0.40.5 F5 BIG IP Access Policy Manager 14.1.0.6 F5 BIG IP Access Policy Manager 14.1.0.6.0.11.9 F5 BIG IP Access Policy Manager 14.1.0.6.0.14.9 F5 BIG IP Access Policy Manager 14.1.0.6.0.68.9 F5 BIG IP Access Policy Manager 14.1.0.6.0.70.9 F5 BIG IP Access Policy Manager 14.1.2 F5 BIG IP Access Policy Manager 14.1.2-0.0.37 F5 BIG IP Access Policy Manager 14.1.2-0.89.37 F5 BIG IP Access Policy Manager 14.1.2.0.11.37 F5 BIG IP Access Policy Manager 14.1.2.0.18.37 F5 BIG IP Access Policy Manager 14.1.2.0.32.37 F5 BIG IP Access Policy Manager 14.1.2.1 F5 BIG IP Access Policy Manager 14.1.2.1-0.0.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.14.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.16.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.34.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.46.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.97.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.99.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.105.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.111.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.115.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.122.4 F5 BIG IP Access Policy Manager 14.1.2.2 F5 BIG IP Access Policy Manager 14.1.2.2-0.0.4 F5 BIG IP Access Policy Manager 14.1.2.3 F5 BIG IP Access Policy Manager 14.1.2.3-0.0.5 F5 BIG IP Access Policy Manager 14.1.2.4 F5 BIG IP Access Policy Manager 14.1.2.5 F5 BIG IP Access Policy Manager 15.0.0 F5 BIG IP Access Policy Manager 15.0.1 F5 BIG IP Access Policy Manager 15.0.1.0.33.11 F5 BIG IP Access Policy Manager 15.0.1.0.48.11 F5 BIG IP Access Policy Manager 15.0.1.1 F5 BIG IP Access Policy Manager 15.0.1.2 F5 BIG IP Access Policy Manager 15.0.1.3 F5 BIG IP Access Policy Manager 15.0.1.4 F5 BIG IP Access Policy Manager 15.1.0 F5 BIG IP Access Policy Manager 15.1.0.1 F5 BIG IP Access Policy Manager 15.1.0.2 F5 BIG IP Access Policy Manager 15.1.0.3 F5 BIG IP Access Policy Manager Client 7.1.5 F5 BIG IP Access Policy Manager Client 7.1.6 F5 BIG IP Access Policy Manager Client 7.1.6.1 F5 BIG IP Access Policy Manager Client 7.1.7 F5 BIG IP Access Policy Manager Client 7.1.8 F5 BIG IP Access Policy Manager Client 7.1.8.2 F5 BIG IP Access Policy Manager Client 7.1.9	108

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

References

https://support.f5.com/csp/article/K20346072