Vulnerabilities > F5 > BIG IP Ddos Hybrid Defender > 14.1.2.7

DATE CVE VULNERABILITY TITLE RISK
2020-11-05 CVE-2020-5943 Inadequate Encryption Strength vulnerability in F5 products
In versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed through the REST interface, the protected fields are obfuscated in the REST response, not protected via a SecureVault cryptogram as TMSH does.
network
low complexity
f5 CWE-326
4.0