CVEvulnerability
CVE-2020-5851
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-01-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
On impacted versions and platforms the Trusted Platform Module (TPM) system integrity check cannot detect modifications to specific system components. This issue only impacts specific engineering hotfixes and platforms. NOTE: This vulnerability does not affect any of the BIG-IP major, minor or maintenance releases you obtained from downloads.f5.com. The affected Engineering Hotfix builds are as follows: Hotfix-BIGIP-14.1.0.2.0.45.4-ENG Hotfix-BIGIP-14.1.0.2.0.62.4-ENG
Affected configurations
• f5 big-ip local traffic manager 14.1.0.2.0.45.4
• f5 big-ip local traffic manager 14.1.0.2.0.62.4
• f5 big-ip advanced firewall manager 14.1.0.2.0.45.4
• f5 big-ip advanced firewall manager 14.1.0.2.0.62.4
• f5 big-ip application acceleration manager 14.1.0.2.0.45.4
• f5 big-ip application acceleration manager 14.1.0.2.0.62.4
• f5 big-ip analytics 14.1.0.2.0.45.4
• f5 big-ip analytics 14.1.0.2.0.62.4
• f5 big-ip access policy manager 14.1.0.2.0.45.4
• f5 big-ip access policy manager 14.1.0.2.0.62.4
• f5 big-ip application security manager 14.1.0.2.0.45.4
• f5 big-ip application security manager 14.1.0.2.0.62.4
• f5 big-ip edge gateway 14.1.0.2.0.45.4
• f5 big-ip edge gateway 14.1.0.2.0.62.4
• f5 big-ip fraud protection service 14.1.0.2.0.45.4
• f5 big-ip fraud protection service 14.1.0.2.0.62.4
• f5 big-ip global traffic manager 14.1.0.2.0.45.4
• f5 big-ip global traffic manager 14.1.0.2.0.62.4
• f5 big-ip link controller 14.1.0.2.0.45.4
• f5 big-ip link controller 14.1.0.2.0.62.4
• f5 big-ip policy enforcement manager 14.1.0.2.0.45.4
• f5 big-ip policy enforcement manager 14.1.0.2.0.62.4
• f5 big-ip webaccelerator 14.1.0.2.0.45.4
• f5 big-ip webaccelerator 14.1.0.2.0.62.4
• f5 big-ip domain name system 14.1.0.2.0.45.4
• f5 big-ip domain name system 14.1.0.2.0.62.4
References
- https://support.f5.com/csp/article/K91171450 Vendor Advisory
- https://support.f5.com/csp/article/K91171450 Vendor Advisory