CVE-2020-5924

MEDIUM

BIG-IP APM <12.1.5.1-11.6.5.2 - Memory Corruption

Title source: llm

Description

In BIG-IP APM versions 12.1.0-12.1.5.1 and 11.6.1-11.6.5.2, RADIUS authentication leaks memory when the username for authentication is not set.

References (1)

Scores

CVSS v3 5.3
EPSS 0.0053
EPSS Percentile 66.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Classification

CWE
CWE-401
Status published

Affected Products (1)

f5/big-ip_access_policy_manager < 11.6.5

Timeline

Published Aug 26, 2020
Tracked Since Feb 18, 2026