CVE-2020-5908

MEDIUM 5.5CVE-2020-5908 · Published 01/07/2020 · updated 17/06/2026

In short

CVE-2020-5908 is a MEDIUM (CVSS 5.5) vulnerability affecting big-ip access policy manager (f5).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 28.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
big-ip access policy manager f5	`≥ 11.6.1, ≤ 11.6.5.2≥ 12.1.0, ≤ 12.1.5`	No fix yet

In versions bundled with BIG-IP APM 12.1.0-12.1.5 and 11.6.1-11.6.5.2, Edge Client for Linux exposes full session ID in the local log files.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 11.6.1, ≤ 11.6.5.2≥ 12.1.0, ≤ 12.1.5

No fix yet

More vulnerabilities in big-ip access policy manager

See all →