CVE-2020-5855

When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
f5CNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
VendorProductVersion
f5big-ip_access_policy_manager
11.5.2 ≤
𝑥
≤ 11.6.5
f5big-ip_access_policy_manager
12.1.0 ≤
𝑥
≤ 12.1.5
f5big-ip_access_policy_manager
13.1.0 ≤
𝑥
≤ 13.1.3
f5big-ip_access_policy_manager
14.1.0 ≤
𝑥
≤ 14.1.2
f5big-ip_access_policy_manager
15.0.0 ≤
𝑥
≤ 15.1.0
f5big-ip_access_policy_manager_client
7.1.5 ≤
𝑥
≤ 7.1.8
𝑥
= Vulnerable software versions