8x8 · Report #1519841
F5 BIG-IP TMUI RCE - CVE-2020-5902 (██.packet8.net)
Validstatus
criticalseverity
46upvotes
25 Mar 2022disclosed
Summary
@remonsec reported to us a vulnerability in F5 BIG-IP's Traffic Management User Interface (TMUI), which exploited, could have led to RCE (in undisclosed pages): CVE-2020-5902 We swiftly applied the fix to the F5 BIG-IP & restricted access further, which resolved the issue.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.